Vulnerability CVE-2015-4000

[Jcsy]

Does Vulnerability CVE-2015-4000 affects Cacti ?

[micke2k]

Its usually the web server that handles the ssl. Should be IIS/Apache or Openssl that needs to be patched. Maybe the browser as well.

Centos 7 latest not vulnerable;

Name : openssl
Arch : x86_64
Epoch : 1
Version : 1.0.1e

openssl s_client -connect 127.0.0.1:443 -cipher "EDH" |grep "Server"

Server Temp Key: DH, 2048 bits

I assume that you have seen something in the IPS logs that triggered this? Try updating apache/IIS. Also affects SSH among other things.

https://www.openssl.org/blog/blog/2015/ ... g-changes/