High severity7.5NVD Advisory· Published Apr 5, 2016· Updated Jun 17, 2026
CVE-2016-3125
CVE-2016-3125
Description
The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
10- lists.fedoraproject.org/pipermail/package-announce/2016-March/179109.htmlnvdThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2016-March/179143.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-updates/2016-06/msg00045.htmlnvdThird Party Advisory
- bugs.proftpd.org/show_bug.cginvdIssue Tracking
- proftpd.org/docs/NEWS-1.3.5bnvdRelease Notes
- proftpd.org/docs/NEWS-1.3.6rc2nvdRelease Notes
- www.openwall.com/lists/oss-security/2016/03/11/14nvdMailing List
- www.openwall.com/lists/oss-security/2016/03/11/3nvdMailing List
- lists.fedoraproject.org/pipermail/package-announce/2016-March/179905.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-05/msg00080.htmlnvd
News mentions
0No linked articles in our index yet.