OpenSSL SSLv2 Null Pointer Dereference Client Denial of Service Vulnerability
BID:20246
Info
OpenSSL SSLv2 Null Pointer Dereference Client Denial of Service Vulnerability
| Bugtraq ID: | 20246 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2006-4343 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 28 2006 12:00AM |
| Updated: | Mar 19 2015 09:25AM |
| Credit: | The vendor credits Tavis Ormandy and Will Drewry of the Google Security Team with the discovery of this vulnerability. |
| Vulnerable: |
Xerox WorkCentre Pro 275 Xerox WorkCentre Pro 265 Xerox WorkCentre Pro 255 Xerox WorkCentre Pro 245 Xerox WorkCentre Pro 238 Xerox WorkCentre Pro 232 Xerox WorkCentre 7665 0 Xerox WorkCentre 7655 0 Xerox WorkCentre 275 Xerox WorkCentre 265 Xerox WorkCentre 255 Xerox WorkCentre 245 Xerox WorkCentre 238 Xerox WorkCentre 232 VMWare Workstation 6.0.2 VMWare Workstation 6.0.1 VMWare Workstation 6.0 VMWare Workstation 5.5.5 VMWare Workstation 5.5.4 build 44386 VMWare Workstation 5.5.4 VMWare Workstation 5.5.3 build 42958 VMWare Workstation 5.5.3 build 34685 VMWare Server 1.0.4 VMWare Server 1.0.3 VMWare Server 1.0.2 VMWare Player 2.0.2 VMWare Player 2.0.1 VMWare Player 2.0 VMWare Player 1.0.5 VMWare Player 1.0.4 VMWare Player 1.0.3 VMWare Player 1.0.2 VMWare ESX Server 3.0.1 VMWare ESX Server 3.0 VMWare ESX Server 2.5.4 VMWare ESX Server 2.5.3 VMWare ESX Server 2.1.3 VMWare ESX Server 2.0.2 VMWare ACE 2.0 VMWare ACE 1.0 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Turbolinux Turbolinux Server 10.0 x86 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Server 7.0 Turbolinux Turbolinux Desktop 10.0 Turbolinux Turbolinux FUJI Turbolinux Turbolinux 10 F... TurboLinux Personal TurboLinux Multimedia Turbolinux Home Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server Hosting Edition 1.0 Turbolinux Appliance Server 1.0 Workgroup Edition Turbolinux Appliance Server 1.0 Hosting Edition Turbolinux Appliance Server 2.0 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Secure Enterprise Linux 2.0 SuSE SUSE Linux Enterprise Server 8 Sun Solaris x86 Data Encryption Kit 10.0 Sun Solaris Data Encryption Kit 10.0 Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Grid Engine 5.3 x86 Sun Grid Engine 5.3 Sun Linux Sun Grid Engine 5.3 64-bit SPARC Sun Grid Engine 5.3 32-bit SPARC Sun Grid Engine 6.0 Update7_1 Sun Grid Engine 6.0 Update7 Sun Grid Engine 6.0 Update6 Sun Grid Engine 6.0 Update5 Sun Grid Engine 6.0 Update4 Sun Grid Engine 6.0 Update3 Sun Grid Engine 6.0 Update2 Sun Grid Engine 6.0 Update1 Sun Grid Engine 6.0 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux -current SGI ProPack 3.0 SP6 Serv-U FTP Server 6.3.3 0 Serv-U FTP Server 6.0 1 Serv-U FTP Server 6.0 0 Serv-U FTP Server 6.2.0.1 Serv-U FTP Server 6.1.0.5 Serv-U FTP Server 6.1.0.4 Serv-U FTP Server 6.1.0.1 Serv-U FTP Server 6.1.0.0 Secure Computing SnapGear SG710 0 Secure Computing SnapGear SG580 0 Secure Computing SnapGear SG565 0 Secure Computing SnapGear SG560 0 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux Standard Server 8.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Novell Linux Desktop 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 10.1 S.u.S.E. Linux Openexchange Server S.u.S.E. Linux Desktop 1.0 rPath rPath Linux 1 RedHat Network Satellite (for RHEL 4) 5.1 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Desktop 4.0 RedHat Desktop 3.0 RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 RedHat Advanced Workstation for the Itanium Processor 2.1 Red Hat Red Hat Network Satellite Server 5.0 Red Hat Red Hat Network Satellite Server 4.2 Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux AS 3 Red Hat Enterprise Linux AS 2.1 IA64 Red Hat Enterprise Linux AS 2.1 ProZIlla ProZilla Download Accelarator 1.4 .0 ProZIlla ProZilla Download Accelarator 1.3.2 ProZIlla ProZilla Download Accelarator 1.2.1 Oracle Oracle HTTP Server 9.2 .8 Oracle Oracle HTTP Server 9.2 .0 Oracle Oracle HTTP Server 9.1 Oracle Oracle HTTP Server 9.0.3 .1 Oracle Oracle HTTP Server 9.0.2 .3 Oracle Oracle HTTP Server 9.0.2 Oracle Oracle HTTP Server 9.0.1 Oracle Oracle HTTP Server 8.1.7 Oracle Oracle HTTP Server 1.0.2 .2 Oracle Oracle HTTP Server 1.0.2 .1 Oracle Oracle HTTP Server 1.0.2 .0 OpenVPN OpenVPN 2.0.8 OpenVPN OpenVPN 2.0.7 OpenVPN OpenVPN 2.0.6 OpenVPN OpenVPN 2.0.5 OpenVPN OpenVPN 2.0.4 OpenVPN OpenVPN 2.0.3 OpenVPN OpenVPN 2.0.2 OpenVPN OpenVPN 2.0.1 OpenVPN OpenVPN 2.0 beta11 OpenVPN OpenVPN 2.0 OpenVPN OpenVPN 1.6 .0 OpenVPN OpenVPN 1.5 .0 OpenVPN OpenVPN 1.4.3 OpenVPN OpenVPN 1.4.2 OpenVPN OpenVPN 1.4.1 OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 0.9.7 k OpenSSL Project OpenSSL 0.9.7 j OpenSSL Project OpenSSL 0.9.7 i OpenSSL Project OpenSSL 0.9.7 h OpenSSL Project OpenSSL 0.9.7 g OpenSSL Project OpenSSL 0.9.7 f OpenSSL Project OpenSSL 0.9.7 e OpenSSL Project OpenSSL 0.9.7 d OpenSSL Project OpenSSL 0.9.7 c OpenSSL Project OpenSSL 0.9.7 beta3 OpenSSL Project OpenSSL 0.9.7 beta2 OpenSSL Project OpenSSL 0.9.7 beta1 OpenSSL Project OpenSSL 0.9.7 b OpenSSL Project OpenSSL 0.9.7 a OpenSSL Project OpenSSL 0.9.7 OpenSSL Project OpenSSL 0.9.6 m OpenSSL Project OpenSSL 0.9.6 l OpenSSL Project OpenSSL 0.9.6 k OpenSSL Project OpenSSL 0.9.6 j OpenSSL Project OpenSSL 0.9.6 i OpenSSL Project OpenSSL 0.9.6 h OpenSSL Project OpenSSL 0.9.6 g OpenSSL Project OpenSSL 0.9.6 f OpenSSL Project OpenSSL 0.9.6 e OpenSSL Project OpenSSL 0.9.6 d OpenSSL Project OpenSSL 0.9.6 c OpenSSL Project OpenSSL 0.9.6 b-36.8 OpenSSL Project OpenSSL 0.9.6 b OpenSSL Project OpenSSL 0.9.6 a OpenSSL Project OpenSSL 0.9.6 OpenSSL Project OpenSSL 0.9.5 a OpenSSL Project OpenSSL 0.9.5 OpenSSL Project OpenSSL 0.9.4 OpenSSL Project OpenSSL 0.9.3 OpenSSL Project OpenSSL 0.9.2 b OpenSSL Project OpenSSL 0.9.1 c OpenPKG OpenPKG 2.5 OpenPKG OpenPKG 2.4 OpenPKG OpenPKG 2.3 OpenPKG OpenPKG 2.2 OpenPKG OpenPKG 2.1 OpenPKG OpenPKG 2.0 OpenPKG OpenPKG Current OpenBSD OpenBSD 3.9 OpenBSD OpenBSD 3.8 NetBSD NetBSD 3.0.2 NetBSD NetBSD 3.0.1 NetBSD NetBSD 3.1 Navision Financials Server 3.0 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 2007.0 x86_64 Mandriva Linux Mandrake 2007.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Kolab Kolab Groupware Server 2.0.3 Kolab Kolab Groupware Server 2.0.2 Kolab Kolab Groupware Server 2.0.1 IPCop IPCop 1.4.12 IPCop IPCop 1.4.11 IPCop IPCop 1.4.10 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2.3 Ingate SIParator 4.2.2 Ingate SIParator 4.2.1 Ingate SIParator 3.3.1 Ingate SIParator 3.2.1 Ingate SIParator 3.2 Ingate SIParator 4.4 Ingate Firewalll 4.4 Ingate Firewall 4.5.1 Ingate Firewall 4.4.1 Ingate Firewall 4.3.4 Ingate Firewall 4.3.3 Ingate Firewall 4.3.2 Ingate Firewall 4.3.1 Ingate Firewall 4.3 Ingate Firewall 4.2 .3 Ingate Firewall 4.2 .2 Ingate Firewall 4.2 .1 Ingate Firewall 4.1.3 Ingate Firewall 3.3.1 Ingate Firewall 3.2.1 Ingate Firewall 3.2 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.3 .132 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0 HP OpenVMS Secure Web Server 1.2 HP OpenVMS Secure Web Server 1.1 -1 HP OpenVMS Secure Web Server 2.1-1 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux FreeBSD FreeBSD 6.0 -STABLE FreeBSD FreeBSD 6.0 -RELEASE FreeBSD FreeBSD 5.5 -STABLE FreeBSD FreeBSD 5.5 -RELEASE FreeBSD FreeBSD 5.4 -RELENG FreeBSD FreeBSD 5.4 -RELEASE FreeBSD FreeBSD 5.4 -PRERELEASE FreeBSD FreeBSD 5.3 -STABLE FreeBSD FreeBSD 5.3 -RELENG FreeBSD FreeBSD 5.3 -RELEASE FreeBSD FreeBSD 5.3 FreeBSD FreeBSD 4.11 -STABLE FreeBSD FreeBSD 4.11 -RELENG FreeBSD FreeBSD 4.11 -RELEASE-p3 FreeBSD FreeBSD 4.11 -RELEASE-p20 FreeBSD FreeBSD 4.11 -RELEASE FreeBSD FreeBSD 6.1 -STABLE FreeBSD FreeBSD 6.1 -RELEASE FreeBSD FreeBSD 5.4-STABLE FileZilla FileZilla Server 0.9.17 FileZilla FileZilla Server 0.9.16 b FileZilla FileZilla Server 0.9.9 FileZilla FileZilla Server 0.9.8 c FileZilla FileZilla Server 0.9.8 b FileZilla FileZilla Server 0.9.8 a FileZilla FileZilla Server 0.9.8 FileZilla FileZilla Server 0.7.1 FileZilla FileZilla Server 0.7 FileZilla FileZilla Server 0.9.6 FileZilla FileZilla Server 0.9.5 FileZilla FileZilla Server 0.9.4e FileZilla FileZilla Server 0.9.4d FileZilla FileZilla Server 0.9.3 FileZilla FileZilla Server 0.9.2 FileZilla FileZilla Server 0.9.1b FileZilla FileZilla Server 0.9.0 FileZilla FileZilla Server 0.8.9 FileZilla FileZilla Server 0.8.8 FileZilla FileZilla Server 0.8.7 FileZilla FileZilla Server 0.8.6a FileZilla FileZilla Server 0.8.5 FileZilla FileZilla Server 0.8.4 FileZilla FileZilla Server 0.8.3 FileZilla FileZilla Server 0.8.2 FileZilla FileZilla Server 0.8.1 FileZilla FileZilla 2.2.22 FileZilla FileZilla 2.2.15 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 cwRsync cwRsync 2.0.9 Cisco Works Common Services (CWCS) 3.0 Cisco Works Common Services (CWCS) 2.2 Cisco Wide Area File Services (WAFS) 0 Cisco Wide Area Application Services (WAAS) 0 Cisco Unified Presence Server 1.0(2) Cisco Unified Presence Server 1.0 Cisco SIP Proxy Server Cisco Security Mars 4.2.2 Cisco Security Agent 5.0 .193 Cisco Security Agent 4.5.1 .657 Cisco Security Agent 4.5.1 .639 Cisco Security Agent 4.5.1 Cisco Security Agent 4.5 Cisco Security Agent 4.0.3 .728 Cisco Security Agent 4.0.3 Cisco Security Agent 4.0.2 Cisco Security Agent 4.0.1 Cisco Security Agent 4.0 Cisco Security Agent 2.1 Cisco Security Agent 5.1 Cisco Security Agent 5.0 Cisco Security Agent 3.x Cisco Secure ACS Solution Engine 3.3.2 Cisco Secure ACS Solution Engine 3.3.1 Cisco Secure ACS Solution Engine 3.3 Cisco Secure ACS Solution Engine Cisco Secure ACS for Windows Server 3.2 Cisco Secure ACS for Windows NT 3.3 Cisco Secure ACS for Windows NT 3.2 Cisco Secure ACS for Windows NT 3.1.1 Cisco Secure ACS for Windows NT 3.1 Cisco Secure ACS for Windows NT 3.0.3 Cisco Secure ACS for Windows NT 3.0 .1 Cisco Secure ACS for Windows NT 3.0 Cisco Secure ACS for Windows NT 2.42 Cisco Secure ACS for Windows NT 2.6.4 Cisco Secure ACS for Windows NT 2.6.3 Cisco Secure ACS for Windows NT 2.6.2 Cisco Secure ACS for Windows NT 2.6 Cisco Secure ACS for Windows NT 2.5 Cisco Secure ACS for Windows NT 2.4 Cisco Secure ACS for Windows NT 2.3 Cisco Secure ACS for Windows NT 2.1 Cisco Secure ACS for Unix 2.3.6 .1 Cisco Secure ACS for Unix 2.3.5 .1 Cisco Secure ACS for Unix 2.3 Cisco Secure ACS for Unix 2.0 Cisco ONS 15454SDH 4.6 (1) Cisco ONS 15454SDH 4.6 (0) Cisco ONS 15454SDH 4.5 Cisco ONS 15454SDH 4.1 (3) Cisco ONS 15454SDH 4.1 (2) Cisco ONS 15454SDH 4.1 (1) Cisco ONS 15454SDH 4.1 (0) Cisco ONS 15454SDH 4.0 (2) Cisco ONS 15454SDH 4.0 (1) Cisco ONS 15454SDH 4.0 (0) Cisco ONS 15454SDH 4.0 Cisco ONS 15454SDH 3.4 Cisco ONS 15454SDH 3.3 Cisco ONS 15454SDH 3.2 Cisco ONS 15454SDH 3.1 Cisco ONS 15454SDH 2.3 (5) Cisco ONS 15454E Optical Transport Platform 0 Cisco ONS 15454 Optical Transport Platform 4.14 Cisco ONS 15454 Optical Transport Platform 4.6 (1) Cisco ONS 15454 Optical Transport Platform 4.6 (0) Cisco ONS 15454 Optical Transport Platform 4.5 Cisco ONS 15454 Optical Transport Platform 4.1 (3) Cisco ONS 15454 Optical Transport Platform 4.1 (2) Cisco ONS 15454 Optical Transport Platform 4.1 (1) Cisco ONS 15454 Optical Transport Platform 4.1 (0) Cisco ONS 15454 Optical Transport Platform 4.1 Cisco ONS 15454 Optical Transport Platform 4.0 (2) Cisco ONS 15454 Optical Transport Platform 4.0 (1) Cisco ONS 15454 Optical Transport Platform 4.0 Cisco ONS 15454 Optical Transport Platform 3.4 Cisco ONS 15454 Optical Transport Platform 3.3 Cisco ONS 15454 Optical Transport Platform 3.2 .0 Cisco ONS 15454 Optical Transport Platform 3.1 .0 Cisco ONS 15454 Optical Transport Platform 3.0 Cisco ONS 15454 Optical Transport Platform 2.3 (5) Cisco ONS 15454 MSTP 0 Cisco ONS 15454 MSPP 0 Cisco ONS 15454 IOS-Based Blades Cisco MDS 9500 0 Cisco MDS 9216i Cisco MDS 9000 2.0 (0.86) Cisco MDS 9000 1.3 (4a) Cisco MDS 9000 1.3 (3.33) Cisco MDS 9000 Cisco IDS 0 Cisco GSS 4492 Global Site Selector 0 Cisco GSS 4491 Global Site Selector 0 Cisco GSS 4490 Global Site Selector 0 Cisco GSS 4480 Global Site Selector Cisco CSS11500 Content Services Switch 7.30 (00.09)S Cisco CSS11500 Content Services Switch 7.30 (00.08)S Cisco CSS11500 Content Services Switch 7.20 (03.10)S Cisco CSS11500 Content Services Switch 7.20 (03.09)S Cisco CSS11500 Content Services Switch 7.10 (05.07)S Cisco CSS11500 Content Services Switch 7.5 Cisco CSS11500 Content Services Switch 7.4 Cisco CSS11500 Content Services Switch Cisco CiscoWorks Common Services 2.2 Cisco CiscoWorks Common Management Foundation 2.2 Cisco CiscoWorks Common Management Foundation 2.1 Cisco CiscoWorks Common Management Foundation 2.0 Cisco CiscoSecure ACS for Windows and Unix 0 Cisco CiscoSecure ACS 1111 Appliance Cisco Call Manager 4.1 (3)SR2 Cisco Call Manager 4.1 (3)SR1 Cisco Call Manager 4.1 (3)ES32 Cisco Call Manager 4.1 (3)ES24 Cisco Call Manager 4.1 (3)ES07 Cisco Call Manager 4.1 (2)ES55 Cisco Call Manager 4.1 (2)ES50 Cisco Call Manager 4.1 (2)ES33 Cisco Call Manager 4.0 (2a)SR2c Cisco Call Manager 4.0 (2a)SR2b Cisco Call Manager 4.0 (2a)ES62 Cisco Call Manager 4.0 (2a)ES56 Cisco Call Manager 4.0 (2a)ES40 Cisco Call Manager 4.0 Cisco Call Manager 5.1 Cisco Call Manager 4.3(1) Cisco Call Manager 4.2(3) Cisco Call Manager 4.1(3)SR4 Cisco Application Control Engine (ACE) Module 0 Cisco Application & Content Networking Software (ACNS) Cisco Access Registrar Cisco 4000 Series Airespace Wireless LAN Controller 3.1.59 .24 Cisco 2000 Series Airespace Wireless LAN Controller 3.1.59 .24 Avaya S8710 R2.0.1 Avaya S8710 R2.0.0 Avaya S8710 CM 3.1 Avaya S8700 R2.0.1 Avaya S8700 R2.0.0 Avaya S8700 CM 3.1 Avaya S8500 R2.0.1 Avaya S8500 R2.0.0 Avaya S8500 CM 3.1 Avaya S8500 0 Avaya S8300 R2.0.1 Avaya S8300 R2.0.0 Avaya S8300 CM 3.1 Avaya Predictive Dialing System (PDS) 11.0 Avaya Predictive Dialing System (PDS) 11.11 Avaya Predictive Dialer 0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking Avaya Intuity LX Avaya Converged Communications Server 2.0 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.3.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.3.9 |
| Not Vulnerable: |
VMWare Workstation 6.0.3 Build 80004 VMWare Workstation 6.0.3 VMWare Workstation 5.5.6 Build 80404 VMWare Server 1.0.5 Build 80187 VMWare Player 2.0.3 Build 80004 VMWare Player 1.0.6 Build 80404 VMWare ACE 2.0.3 VMWare ACE 1.0.5 Serv-U FTP Server 6.3.3.1 Secure Computing SnapGear 3.1.4 u2 OpenVPN OpenVPN 2.0.9 OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.7 l IPCop IPCop 1.4.13 Ingate SIParator 4.5.2 Ingate Firewall 4.5.2 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP OpenVMS Secure Web Server 2.2 FileZilla FileZilla Server 0.9.19 FileZilla FileZilla 2.2.28 cwRsync cwRsync 2.0.10 Cisco Security Agent 5.1 .79 Cisco Security Agent 5.0.0.201 Cisco Security Agent 4.5.1.659 Cisco Secure ACS 4.1(1) build 23 Cisco ONS 15454 8.0 Cisco CSS11500 Content Services Switch 8.10.2 .65 Cisco CSS11500 Content Services Switch 7.50.3 .45 |
Discussion
OpenSSL SSLv2 Null Pointer Dereference Client Denial of Service Vulnerability
OpenSSL is prone to a denial-of-service vulnerability.
A malicious server could cause a vulnerable client application to crash, effectively denying service.
OpenSSL is prone to a denial-of-service vulnerability.
A malicious server could cause a vulnerable client application to crash, effectively denying service.
Exploit / POC
OpenSSL SSLv2 Null Pointer Dereference Client Denial of Service Vulnerability
An attacker must entice a victim user into connecting to a malicious, attacker-controlled server using SSLv2.
The following proof of concept is available:
An attacker must entice a victim user into connecting to a malicious, attacker-controlled server using SSLv2.
The following proof of concept is available:
Solution / Fix
OpenSSL SSLv2 Null Pointer Dereference Client Denial of Service Vulnerability
Solution:
The vendor has addressed this issue in OpenSSL 0.9.8d and 0.9.7l.
Please see the references for more information.
Turbolinux Turbolinux 10 F...
Xerox WorkCentre Pro 245
Xerox WorkCentre 265
Xerox WorkCentre Pro 238
Xerox WorkCentre Pro 255
FreeBSD FreeBSD 5.4-STABLE
FileZilla FileZilla Server 0.7.1
OpenSSL Project OpenSSL 0.9.7 beta1
OpenSSL Project OpenSSL 0.9.7 a
OpenSSL Project OpenSSL 0.9.7 e
OpenSSL Project OpenSSL 0.9.7 g
OpenSSL Project OpenSSL 0.9.7 f
OpenSSL Project OpenSSL 0.9.7 c
FileZilla FileZilla Server 0.9.8 b
OpenSSL Project OpenSSL 0.9.8 c
OpenVPN OpenVPN 1.4.3
OpenVPN OpenVPN 2.0.4
HP System Management Homepage 2.1
HP System Management Homepage 2.1.3 .132
HP System Management Homepage 2.1.5
Turbolinux Turbolinux Server 7.0
Solution:
The vendor has addressed this issue in OpenSSL 0.9.8d and 0.9.7l.
Please see the references for more information.
Turbolinux Turbolinux 10 F...
-
Turbolinux openssl-0.9.7d-11.i586.rpm
Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssl-0.9.7d-11.i586.rpm -
Turbolinux openssl-compat-0.9.6m-10.i586.rpm
Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssl-compat-0.9.6m-10.i586.rpm -
Turbolinux openssl-devel-0.9.7d-11.i586.rpm
Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssl-devel-0.9.7d-11.i586.rpm
Xerox WorkCentre Pro 245
-
Xerox cert_P30_ESS_Network_Controller_Patch.zip
http://a1851.g.akamaitech.net/f/1851/2996/24h/cacheB.xerox.com/downloa ds/usa/en/c/cert_P30_ESS_Network_Controller_Patch.zip
Xerox WorkCentre 265
-
Xerox cert_P30_ESS_Network_Controller_Patch.zip
http://a1851.g.akamaitech.net/f/1851/2996/24h/cacheB.xerox.com/downloa ds/usa/en/c/cert_P30_ESS_Network_Controller_Patch.zip
Xerox WorkCentre Pro 238
-
Xerox cert_P30_ESS_Network_Controller_Patch.zip
http://a1851.g.akamaitech.net/f/1851/2996/24h/cacheB.xerox.com/downloa ds/usa/en/c/cert_P30_ESS_Network_Controller_Patch.zip
Xerox WorkCentre Pro 255
-
Xerox cert_P30_ESS_Network_Controller_Patch.zip
http://a1851.g.akamaitech.net/f/1851/2996/24h/cacheB.xerox.com/downloa ds/usa/en/c/cert_P30_ESS_Network_Controller_Patch.zip
FreeBSD FreeBSD 5.4-STABLE
-
FreeBSD openssl-correction.patch
http://security.FreeBSD.org/patches/SA-06:23/openssl-correction.patch -
FreeBSD openssl-correction.patch.asc
http://security.FreeBSD.org/patches/SA-06:23/openssl-correction.patch. asc -
FreeBSD openssl.patch
http://security.FreeBSD.org/patches/SA-06:23/openssl.patch -
FreeBSD openssl.patch.asc
http://security.FreeBSD.org/patches/SA-06:23/openssl.patch.asc
FileZilla FileZilla Server 0.7.1
-
FileZilla FileZilla_Server-0_9_19.exe
http://prdownloads.sourceforge.net/filezilla/FileZilla_Server-0_9_19.e xe?download
OpenSSL Project OpenSSL 0.9.7 beta1
-
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz
OpenSSL Project OpenSSL 0.9.7 a
-
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz -
Slackware openssl-0.9.7l-i386-1_slack9.0.tgz
Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/o penssl-0.9.7l-i386-1_slack9.0.tgz -
Slackware openssl-solibs-0.9.7l-i386-1_slack9.0.tgz
Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/o penssl-solibs-0.9.7l-i386-1_slack9.0.tgz
OpenSSL Project OpenSSL 0.9.7 e
-
Debian libssl-dev_0.9.7e-3sarge3_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_alpha.deb -
Debian libssl-dev_0.9.7e-3sarge3_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_amd64.deb -
Debian libssl-dev_0.9.7e-3sarge3_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_arm.deb -
Debian libssl-dev_0.9.7e-3sarge3_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_hppa.deb -
Debian libssl-dev_0.9.7e-3sarge3_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_i386.deb -
Debian libssl-dev_0.9.7e-3sarge3_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_ia64.deb -
Debian libssl-dev_0.9.7e-3sarge3_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_m68k.deb -
Debian libssl-dev_0.9.7e-3sarge3_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_mips.deb -
Debian libssl-dev_0.9.7e-3sarge3_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_mipsel.deb -
Debian libssl-dev_0.9.7e-3sarge3_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_powerpc.deb -
Debian libssl-dev_0.9.7e-3sarge3_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_s390.deb -
Debian libssl-dev_0.9.7e-3sarge3_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_sparc.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_alpha.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_amd64.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_arm.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_hppa.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_i386.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_ia64.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_m68k.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_mips.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_mipsel.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_powerpc.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_s390.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_sparc.deb -
Debian openssl_0.9.7e-3sarge3_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_alpha.deb -
Debian openssl_0.9.7e-3sarge3_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_amd64.deb -
Debian openssl_0.9.7e-3sarge3_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_arm.deb -
Debian openssl_0.9.7e-3sarge3_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_hppa.deb -
Debian openssl_0.9.7e-3sarge3_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_i386.deb -
Debian openssl_0.9.7e-3sarge3_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_ia64.deb -
Debian openssl_0.9.7e-3sarge3_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_m68k.deb -
Debian openssl_0.9.7e-3sarge3_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_mips.deb -
Debian openssl_0.9.7e-3sarge3_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_mipsel.deb -
Debian openssl_0.9.7e-3sarge3_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_powerpc.deb -
Debian openssl_0.9.7e-3sarge3_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_s390.deb -
Debian openssl_0.9.7e-3sarge3_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_sparc.deb -
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz -
Slackware openssl-0.9.7l-i486-1_slack10.1.tgz
Slackware 10.1:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ openssl-0.9.7l-i486-1_slack10.1.tgz -
Slackware openssl-solibs-0.9.7l-i486-1_slack10.1.tgz
Slackware 10.1:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ openssl-solibs-0.9.7l-i486-1_slack10.1.tgz -
SuSE openssl-0.9.7e-3.6.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/openssl-0.9.7e-3. 6.i586.rpm -
SuSE openssl-0.9.7e-3.6.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/openssl-0.9.7e- 3.6.x86_64.rpm -
SuSE openssl-32bit-9.3-7.3.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/openssl-32bit-9 .3-7.3.x86_64.rpm -
SuSE openssl-devel-0.9.7e-3.6.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/openssl-devel-0.9 .7e-3.6.i586.rpm -
SuSE openssl-devel-0.9.7e-3.6.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/openssl-devel-0 .9.7e-3.6.x86_64.rpm -
SuSE openssl-devel-32bit-9.3-7.3.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/openssl-devel-3 2bit-9.3-7.3.x86_64.rpm -
Trustix openssl-0.9.7e-8tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-0.9.7l-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-devel-0.9.7e-8tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-devel-0.9.7l-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-python-0.9.7e-8tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-support-0.9.7e-8tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-support-0.9.7l-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates -
Ubuntu libcrypto0.9.7-udeb_0.9.7e-3ubuntu0.4_amd64.udeb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7e-3ubuntu0.4_amd64.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7e-3ubuntu0.4_i386.udeb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7e-3ubuntu0.4_i386.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7e-3ubuntu0.4_powerpc.udeb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7e-3ubuntu0.4_powerpc.udeb -
Ubuntu libssl-dev_0.9.7e-3ubuntu0.4_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 e-3ubuntu0.4_amd64.deb -
Ubuntu libssl-dev_0.9.7e-3ubuntu0.4_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 e-3ubuntu0.4_i386.deb -
Ubuntu libssl-dev_0.9.7e-3ubuntu0.4_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 e-3ubuntu0.4_powerpc.deb -
Ubuntu libssl0.9.7_0.9.7e-3ubuntu0.4_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7e-3ubuntu0.4_amd64.deb -
Ubuntu libssl0.9.7_0.9.7e-3ubuntu0.4_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7e-3ubuntu0.4_i386.deb -
Ubuntu libssl0.9.7_0.9.7e-3ubuntu0.4_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7e-3ubuntu0.4_powerpc.deb -
Ubuntu openssl_0.9.7e-3ubuntu0.4_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7e-3 ubuntu0.4_amd64.deb -
Ubuntu openssl_0.9.7e-3ubuntu0.4_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7e-3 ubuntu0.4_i386.deb -
Ubuntu openssl_0.9.7e-3ubuntu0.4_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7e-3 ubuntu0.4_powerpc.deb
OpenSSL Project OpenSSL 0.9.7 g
-
Mandriva lib64openssl0.9.7-0.9.7g-2.4.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-0.9.7g-2.4.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-devel-0.9.7g-2.4.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-devel-0.9.7g-2.4.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-static-devel-0.9.7g-2.4.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-static-devel-0.9.7g-2.4.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-0.9.7g-2.4.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-0.9.7g-2.4.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-devel-0.9.7g-2.4.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-devel-0.9.7g-2.4.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-static-devel-0.9.7g-2.4.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-static-devel-0.9.7g-2.4.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7g-2.4.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7g-2.4.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7g-2.4.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7g-2.4.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz -
Slackware openssl-solibs-0.9.7l-i486-1_slack10.2.tgz
Slackware 10.2:
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ openssl-solibs-0.9.7l-i486-1_slack10.2.tgz -
SuSE openssl-0.9.7g-2.10.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/openssl-0.9.7g-2 .10.i586.rpm -
SuSE openssl-0.9.7g-2.10.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/openssl-0.9.7g-2. 10.ppc.rpm -
SuSE openssl-0.9.7g-2.10.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/openssl-0.9.7g -2.10.x86_64.rpm -
SuSE openssl-32bit-0.9.7g-2.10.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/openssl-32bit- 0.9.7g-2.10.x86_64.rpm -
SuSE openssl-devel-0.9.7g-2.10.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/openssl-devel-0. 9.7g-2.10.i586.rpm -
SuSE openssl-devel-0.9.7g-2.10.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/openssl-devel-0.9 .7g-2.10.ppc.rpm -
SuSE openssl-devel-0.9.7g-2.10.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/openssl-devel- 0.9.7g-2.10.x86_64.rpm -
SuSE openssl-devel-32bit-0.9.7g-2.10.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/openssl-devel- 32bit-0.9.7g-2.10.x86_64.rpm -
Ubuntu libcrypto0.9.7-udeb_0.9.7g-1ubuntu1.3_amd64.udeb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7g-1ubuntu1.3_amd64.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7g-1ubuntu1.3_i386.udeb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7g-1ubuntu1.3_i386.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7g-1ubuntu1.3_powerpc.udeb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7g-1ubuntu1.3_powerpc.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7g-1ubuntu1.3_sparc.udeb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7g-1ubuntu1.3_sparc.udeb -
Ubuntu libssl-dev_0.9.7g-1ubuntu1.3_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 g-1ubuntu1.3_amd64.deb -
Ubuntu libssl-dev_0.9.7g-1ubuntu1.3_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 g-1ubuntu1.3_i386.deb -
Ubuntu libssl-dev_0.9.7g-1ubuntu1.3_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 g-1ubuntu1.3_powerpc.deb -
Ubuntu libssl-dev_0.9.7g-1ubuntu1.3_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 g-1ubuntu1.3_sparc.deb -
Ubuntu libssl0.9.7_0.9.7g-1ubuntu1.3_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7g-1ubuntu1.3_amd64.deb -
Ubuntu libssl0.9.7_0.9.7g-1ubuntu1.3_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7g-1ubuntu1.3_i386.deb -
Ubuntu libssl0.9.7_0.9.7g-1ubuntu1.3_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7g-1ubuntu1.3_powerpc.deb -
Ubuntu libssl0.9.7_0.9.7g-1ubuntu1.3_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7g-1ubuntu1.3_sparc.deb -
Ubuntu openssl_0.9.7g-1ubuntu1.3_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7g-1 ubuntu1.3_amd64.deb -
Ubuntu openssl_0.9.7g-1ubuntu1.3_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7g-1 ubuntu1.3_i386.deb -
Ubuntu openssl_0.9.7g-1ubuntu1.3_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7g-1 ubuntu1.3_powerpc.deb -
Ubuntu openssl_0.9.7g-1ubuntu1.3_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7g-1 ubuntu1.3_sparc.deb
OpenSSL Project OpenSSL 0.9.7 f
-
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz
OpenSSL Project OpenSSL 0.9.7 c
-
Mandriva lib64openssl0.9.7-0.9.7c-3.6.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-devel-0.9.7c-3.6.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-static-devel-0.9.7c-3.6.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-0.9.7c-3.6.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-devel-0.9.7c-3.6.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-static-devel-0.9.7c-3.6.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7c-3.6.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7c-3.6.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz
FileZilla FileZilla Server 0.9.8 b
-
FileZilla FileZilla_Server-0_9_19.exe
http://prdownloads.sourceforge.net/filezilla/FileZilla_Server-0_9_19.e xe?download
OpenSSL Project OpenSSL 0.9.8 c
-
OpenSSL openssl-0.9.8d.tar.gz
http://www.openssl.org/source/openssl-0.9.8d.tar.gz
OpenVPN OpenVPN 1.4.3
-
OpenVPN openvpn-2.0.9.tar.gz
http://openvpn.net/download.html#stable
OpenVPN OpenVPN 2.0.4
-
OpenVPN openvpn-2.0.9.tar.gz
http://openvpn.net/download.html#stable
HP System Management Homepage 2.1
-
HP HP System Management Homepage for Linux (AMD64/EM64T) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26866.html -
HP HP System Management Homepage for Linux (x86) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26864.html -
HP HP System Management Homepage for Windows version 2.1.8-179
http://h18023.www1.hp.com/support/files/server/us/download/26977.html
HP System Management Homepage 2.1.3 .132
-
HP HP System Management Homepage for Linux (AMD64/EM64T) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26866.html -
HP HP System Management Homepage for Linux (x86) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26864.html -
HP HP System Management Homepage for Windows version 2.1.8-179
http://h18023.www1.hp.com/support/files/server/us/download/26977.html
HP System Management Homepage 2.1.5
-
HP HP System Management Homepage for Linux (AMD64/EM64T) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26866.html -
HP HP System Management Homepage for Linux (x86) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26864.html -
HP HP System Management Homepage for Windows version 2.1.8-179
http://h18023.www1.hp.com/support/files/server/us/download/26977.html
Turbolinux Turbolinux Server 7.0
-
Turbolinux openssl-0.9.6m-8.i586.rpm
Turbolinux 7 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/openssl-0.9.6m-8.i586.rpm -
Turbolinux openssl-devel-0.9.6m-8.i586.rpm
Turbolinux 7 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/openssl-devel-0.9.6m-8.i586.rpm
References
OpenSSL SSLv2 Null Pointer Dereference Client Denial of Service Vulnerability
References:
References:
- ASA-2006-260 - HP-UX OpenSSL Denial of Service (DoS), Increase Privilege (HPSBUX (Avaya)
- Cisco Security Response: Multiple Vulnerabilities in OpenSSL library (Cisco)
- Critical Patch Update - January 2007 (Oracle)
- cwRsync 2.0.10 released (cwRsync)
- HPSBUX02174 SSRT061239 rev.1 HP-UX Running OpenSSL Denial of Service (DoS), Incr (HP)
- IPCop 1.4.13 released (IPCop)
- Kolab Security Issue 11 20061002 (Kolab)
- Release notice for Ingate Firewall 4.5.2 and Ingate SIParator 4.5.2 (Ingate)
- SnapGear Firmware Release Notes (Secure Computing)
- Sun Alert ID: 102711 (Sun)
- VMware Workstation 6.0 Release Notes (VMware)
- Vulnerability Note VU#386964 - OpenSSL SSLv2 client code fails to properly check (US-CERT)
- HPSBMA02566 SSRT100045 rev.1 - HP System Management Homepage (SMH) for Linux and (HP)
- RHSA-2008:0264-3 Moderate: Red Hat Network Satellite Server Solaris client secur (Red Hat)
- RHSA-2008:0525-5 Red Hat Network Satellite Server Solaris client security update (Red Hat)
- RHSA-2008:0629-3 Moderate: Red Hat Network Satellite Server Solaris client secur (Red Hat)
- Sun Alert ID: 102668 - Security Vulnerabilities In OpenSSL Affect Sun Grid Engin (Sun)
- XEROX SECURITY BULLETIN XRX07-001 (XEROX)