Description
The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack.
References
- 65470 vdb-entry
- https://support.sourcefire.com/notices/notice/1437
- 40143 third-party-advisory
- 1024092 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-10-107/
- ADV-2010-1438 vdb-entry
- 20100610 ZDI-10-107: Multiple Sourcefire Products Static Web SSL Keys Vulnerability mailing-list
- sourcefire3d-ssl-mitm(59380) vdb-entry