Mozilla Firefox, Thunderbird and SeaMonkey contain a flaw related to the SSL implementation's failure to properly set the minimum key length for Diffie-Hellman Ephemeral mode. This may allow a remote attacker to trivially brute-force the cryptographic protection.
Classification
Location:
Remote / Network Access
Attack Type:
Cryptographic
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Public
Disclosure:
Vendor Verified
OSVDB:
Web Related
Solution
Upgrade Firefox to version 3.6.11 or 3.5.14 or higher, Thunderbird to 3.1.5 or 3.0.9 or higher and SeaMonkey to 2.0.9 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
