CVE-2016-3125: High severity proftpd vulnerability
The modtls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3125?
CVE-2016-3125 has been classified as a medium-severity vulnerability due to potential weaknesses in the Diffie-Hellman key generation.
How do I fix CVE-2016-3125?
To fix CVE-2016-3125, you should upgrade to ProFTPD version 1.3.6rc2 or later.
What is affected by CVE-2016-3125?
CVE-2016-3125 affects ProFTPD versions earlier than 1.3.5b and 1.3.6 before 1.3.6rc2.
What impact can CVE-2016-3125 have on my system?
CVE-2016-3125 could potentially allow attackers to exploit weaker than intended keys used in the TLS handshake.
Does CVE-2016-3125 affect specific operating systems?
Yes, CVE-2016-3125 affects various operating systems including openSUSE 13.1 and Fedora versions 22 and 23.