Closed Bug 666110 Opened 13 years ago Closed 13 years ago

services.addons.mozilla.org does not support RFC 5746, potentially vulnerable to CVE-2009-3555

Categories

(mozilla.org Graveyard :: Server Operations, task)

Product:
mozilla.org Graveyard
Component:
Server Operations
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 657920

People

(Reporter: dveditz, Unassigned)

References

(
URL
)

Details

https://services.addons.mozilla.org/ gives warnings in the error console that it does not support RFC 5746 and is potentially vulnerable to CVE-2009-3555. It does not show the safe SSL indicators if the user has set security.ssl.treat_unsafe_renegotiation_as_broken to true
versioncheck.AMO and AMO itself seem to be OK, though.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
Firefox 6b2
"versioncheck.addons.mozilla.org : server does not support RFC 5746, see CVE-2009-3555"
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.