CVE ID:	CVE-2010-4180
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Test IDs:	1.3.6.1.4.1.25623.1.0.68576   1.3.6.1.4.1.25623.1.0.68647   1.3.6.1.4.1.25623.1.0.68658   1.3.6.1.4.1.25623.1.0.69204   1.3.6.1.4.1.25623.1.0.122287   1.3.6.1.4.1.25623.1.0.112948   1.3.6.1.4.1.25623.1.0.112947
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4180 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html BugTraq ID: 45164 http://www.securityfocus.com/bid/45164 CERT/CC vulnerability note: VU#737740 http://www.kb.cert.org/vuls/id/737740 Debian Security Information: DSA-2141 (Google Search) http://www.debian.org/security/2011/dsa-2141 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052315.html http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html HPdes Security Advisory: HPSBHF02706 http://marc.info/?l=bugtraq&m=132077688910227&w=2 HPdes Security Advisory: HPSBMA02658 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 HPdes Security Advisory: HPSBMU02759 http://www.securityfocus.com/archive/1/522176 HPdes Security Advisory: HPSBOV02670 http://marc.info/?l=bugtraq&m=130497251507577&w=2 HPdes Security Advisory: HPSBUX02638 http://marc.info/?l=bugtraq&m=129916880600544&w=2 HPdes Security Advisory: SSRT100339 http://marc.info/?l=bugtraq&m=129916880600544&w=2 HPdes Security Advisory: SSRT100413 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 HPdes Security Advisory: SSRT100475 http://marc.info/?l=bugtraq&m=130497251507577&w=2 HPdes Security Advisory: SSRT100613 http://marc.info/?l=bugtraq&m=132077688910227&w=2 HPdes Security Advisory: SSRT100817 http://www.securityfocus.com/archive/1/522176 http://www.mandriva.com/security/advisories?name=MDVSA-2010:248 http://osvdb.org/69565 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910 RedHat Security Advisories: RHSA-2010:0977 http://www.redhat.com/support/errata/RHSA-2010-0977.html RedHat Security Advisories: RHSA-2010:0978 http://www.redhat.com/support/errata/RHSA-2010-0978.html RedHat Security Advisories: RHSA-2010:0979 http://www.redhat.com/support/errata/RHSA-2010-0979.html RedHat Security Advisories: RHSA-2011:0896 http://www.redhat.com/support/errata/RHSA-2011-0896.html http://www.securitytracker.com/id?1024822 http://secunia.com/advisories/42469 http://secunia.com/advisories/42473 http://secunia.com/advisories/42493 http://secunia.com/advisories/42571 http://secunia.com/advisories/42620 http://secunia.com/advisories/42811 http://secunia.com/advisories/42877 http://secunia.com/advisories/43169 http://secunia.com/advisories/43170 http://secunia.com/advisories/43171 http://secunia.com/advisories/43172 http://secunia.com/advisories/43173 http://secunia.com/advisories/44269 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471 SuSE Security Announcement: SUSE-SR:2011:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html SuSE Security Announcement: SUSE-SR:2011:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html SuSE Security Announcement: SUSE-SU-2011:0847 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html SuSE Security Announcement: openSUSE-SU-2011:0845 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html http://ubuntu.com/usn/usn-1029-1 http://www.vupen.com/english/advisories/2010/3120 http://www.vupen.com/english/advisories/2010/3122 http://www.vupen.com/english/advisories/2010/3134 http://www.vupen.com/english/advisories/2010/3188 http://www.vupen.com/english/advisories/2011/0032 http://www.vupen.com/english/advisories/2011/0076 http://www.vupen.com/english/advisories/2011/0268