OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability
BID:20249
Info
OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability
| Bugtraq ID: | 20249 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2006-3738 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 28 2006 12:00AM |
| Updated: | May 09 2011 07:52PM |
| Credit: | The vendor credits Tavis Ormandy and Will Drewry of the Google Security Team with the discovery of this vulnerability. |
| Vulnerable: |
Xerox WorkCentre Pro 275 Xerox WorkCentre Pro 265 Xerox WorkCentre Pro 255 Xerox WorkCentre Pro 245 Xerox WorkCentre Pro 238 Xerox WorkCentre Pro 232 Xerox WorkCentre 7665 0 Xerox WorkCentre 7655 0 Xerox WorkCentre 275 Xerox WorkCentre 265 Xerox WorkCentre 255 Xerox WorkCentre 245 Xerox WorkCentre 238 Xerox WorkCentre 232 VMWare ESX Server 3.0.1 VMWare ESX Server 3.0 VMWare ESX Server 2.5.4 VMWare ESX Server 2.5.3 VMWare ESX Server 2.1.3 VMWare ESX Server 2.0.2 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Turbolinux Turbolinux Server 10.0 x86 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Server 7.0 Turbolinux Turbolinux Server 10.0.0 x64 Turbolinux Turbolinux Desktop 10.0 Turbolinux Turbolinux FUJI Turbolinux Turbolinux 10 F... TurboLinux Personal TurboLinux Multimedia Turbolinux Home Turbolinux FUJI 0 Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server Hosting Edition 1.0 Turbolinux Appliance Server 1.0 Workgroup Edition Turbolinux Appliance Server 1.0 Hosting Edition Turbolinux Appliance Server 2.0 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Secure Enterprise Linux 2.0 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 8 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise Desktop 10 Sun Solaris x86 Data Encryption Kit 10.0 Sun Solaris Data Encryption Kit 10.0 Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Grid Engine 5.3 x86 Sun Grid Engine 5.3 Sun Linux Sun Grid Engine 5.3 64-bit SPARC Sun Grid Engine 5.3 32-bit SPARC Sun Grid Engine 6.0 Update7_1 Sun Grid Engine 6.0 Update7 Sun Grid Engine 6.0 Update6 Sun Grid Engine 6.0 Update5 Sun Grid Engine 6.0 Update4 Sun Grid Engine 6.0 Update3 Sun Grid Engine 6.0 Update2 Sun Grid Engine 6.0 Update1 Sun Grid Engine 6.0 Stonesoft StoneGate IPS Sensor and Analyzer 2.0.1 Stonesoft StoneGate IPS Sensor and Analyzer 2.0 Stonesoft StoneGate High Availability Firewall and VPN 3.0.1 Stonesoft StoneGate High Availability Firewall and VPN 3.0 Stonesoft StoneGate High Availability Firewall and VPN 2.6.5 Stonesoft StoneGate High Availability Firewall and VPN 2.6.4 Stonesoft StoneGate High Availability Firewall and VPN 2.6.3 Stonesoft StoneGate High Availability Firewall and VPN 2.6 Stonesoft StoneGate High Availability Firewall and VPN 2.0.8 Stonesoft StoneGate High Availability Firewall and VPN 2.0 Stonesoft StoneGate High Availability Firewall and VPN 1.7 Stonesoft StoneBeat WebCluster 2.5 Stonesoft StoneBeat WebCluster 2.0 Stonesoft StoneBeat SecurityCluster 2.5 Stonesoft StoneBeat SecurityCluster 2.0 Stonesoft StoneBeat FullCluster for Raptor 2.5 Stonesoft StoneBeat FullCluster for Raptor 2.0 Stonesoft StoneBeat FullCluster for ISA Server 3.0 Stonesoft StoneBeat FullCluster for Gauntlet 2.0 Stonesoft StoneBeat FullCluster for Firewall-1 3.0 Stonesoft StoneBeat FullCluster for Firewall-1 2.0 Stonesoft ServerCluster 2.5.2 Stonesoft ServerCluster 2.5 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux -current SGI ProPack 3.0 SP6 Serv-U FTP Server 6.3.3 0 Serv-U FTP Server 6.0 1 Serv-U FTP Server 6.0 0 Serv-U FTP Server 6.2.0.1 Serv-U FTP Server 6.1.0.5 Serv-U FTP Server 6.1.0.4 Serv-U FTP Server 6.1.0.1 Serv-U FTP Server 6.1.0.0 Secure Computing SnapGear SG710 0 Secure Computing SnapGear SG580 0 Secure Computing SnapGear SG565 0 Secure Computing SnapGear SG560 0 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux Standard Server 8.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Novell Linux Desktop 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 10.1 S.u.S.E. Linux Openexchange Server S.u.S.E. Linux Desktop 1.0 S.u.S.E. Linux Database Server 0 rPath rPath Linux 1 RedHat Network Satellite (for RHEL 4) 4.2 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux AS 4 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux AS 2.1 RedHat Desktop 4.0 RedHat Desktop 3.0 RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 RedHat Advanced Workstation for the Itanium Processor 2.1 Red Hat Red Hat Network Satellite Server 5.0 Red Hat Red Hat Network Satellite Server 4.2 Red Hat Network Satellite (for RHEL 3) 4.2 ProZIlla ProZilla Download Accelarator 1.4 .0 ProZIlla ProZilla Download Accelarator 1.3.2 ProZIlla ProZilla Download Accelarator 1.2.1 Oracle Oracle HTTP Server 9.2 .8 Oracle Oracle HTTP Server 9.2 .0 Oracle Oracle HTTP Server 9.1 Oracle Oracle HTTP Server 9.0.3 .1 Oracle Oracle HTTP Server 9.0.2 .3 Oracle Oracle HTTP Server 9.0.2 Oracle Oracle HTTP Server 9.0.1 Oracle Oracle HTTP Server 8.1.7 OpenVPN OpenVPN 2.0.8 OpenVPN OpenVPN 2.0.7 OpenVPN OpenVPN 2.0.6 OpenVPN OpenVPN 2.0.5 OpenVPN OpenVPN 2.0.4 OpenVPN OpenVPN 2.0.3 OpenVPN OpenVPN 2.0.2 OpenVPN OpenVPN 2.0.1 OpenVPN OpenVPN 2.0 beta11 OpenVPN OpenVPN 2.0 OpenVPN OpenVPN 1.6 .0 OpenVPN OpenVPN 1.5 .0 OpenVPN OpenVPN 1.4.3 OpenVPN OpenVPN 1.4.2 OpenVPN OpenVPN 1.4.1 OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 0.9.7 k OpenSSL Project OpenSSL 0.9.7 j OpenSSL Project OpenSSL 0.9.7 i OpenSSL Project OpenSSL 0.9.7 h OpenSSL Project OpenSSL 0.9.7 g OpenSSL Project OpenSSL 0.9.7 f OpenSSL Project OpenSSL 0.9.7 e OpenSSL Project OpenSSL 0.9.7 d OpenSSL Project OpenSSL 0.9.7 c OpenSSL Project OpenSSL 0.9.7 beta3 OpenSSL Project OpenSSL 0.9.7 beta2 OpenSSL Project OpenSSL 0.9.7 beta1 OpenSSL Project OpenSSL 0.9.7 b OpenSSL Project OpenSSL 0.9.7 a OpenSSL Project OpenSSL 0.9.7 OpenSSL Project OpenSSL 0.9.6 m OpenSSL Project OpenSSL 0.9.6 l OpenSSL Project OpenSSL 0.9.6 k OpenSSL Project OpenSSL 0.9.6 j OpenSSL Project OpenSSL 0.9.6 i OpenSSL Project OpenSSL 0.9.6 h OpenSSL Project OpenSSL 0.9.6 g OpenSSL Project OpenSSL 0.9.6 f OpenSSL Project OpenSSL 0.9.6 e OpenSSL Project OpenSSL 0.9.6 d OpenSSL Project OpenSSL 0.9.6 c OpenSSL Project OpenSSL 0.9.6 b-36.8 OpenSSL Project OpenSSL 0.9.6 b OpenSSL Project OpenSSL 0.9.6 a OpenSSL Project OpenSSL 0.9.6 OpenSSL Project OpenSSL 0.9.5 a OpenSSL Project OpenSSL 0.9.5 OpenSSL Project OpenSSL 0.9.4 OpenSSL Project OpenSSL 0.9.3 OpenSSL Project OpenSSL 0.9.2 b OpenSSL Project OpenSSL 0.9.1 c OpenPKG OpenPKG 2.5 OpenPKG OpenPKG 2.4 OpenPKG OpenPKG 2.3 OpenPKG OpenPKG 2.2 OpenPKG OpenPKG 2.1 OpenPKG OpenPKG 2.0 OpenPKG OpenPKG Current OpenBSD OpenBSD 3.9 OpenBSD OpenBSD 3.8 Nortel Networks WLAN Access Point 7250.0 Nortel Networks VPN Router 600 0 Nortel Networks VPN Router 5000 Nortel Networks VPN Router 2700 Nortel Networks VPN Router 1750 0 Nortel Networks VPN Router 1740 Nortel Networks VPN Router 1700 Nortel Networks VPN Router 1100 Nortel Networks VPN Router 1050 Nortel Networks VPN Router 1010 Nortel Networks VPN Router - Contivity 4600 0 Nortel Networks VPN Router - Contivity 4500 0 Nortel Networks VPN Router - Contivity 2600 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Meridian 1 - Option 81C 0 Nortel Networks Meridian 1 - Option 61C 0 Nortel Networks Meridian 1 - Option 51C 0 Nortel Networks Meridian 1 - Option 11C 0 Nortel Networks IP Address Domain Manager Nortel Networks CS 1000 Nortel Networks Communications Server 1000 NetBSD NetBSD 3.0.2 NetBSD NetBSD 3.0.1 NetBSD NetBSD 3.1 Navision Financials Server 3.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Linux Mandrake 2006.0 x86_64 MandrakeSoft Linux Mandrake 2006.0 MandrakeSoft Linux Mandrake 2007.0 x86_64 MandrakeSoft Linux Mandrake 2007.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Kolab Kolab Groupware Server 2.0.3 Kolab Kolab Groupware Server 2.0.2 Kolab Kolab Groupware Server 2.0.1 IPCop IPCop 1.4.12 IPCop IPCop 1.4.11 IPCop IPCop 1.4.10 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2.3 Ingate SIParator 4.2.2 Ingate SIParator 4.2.1 Ingate SIParator 3.3.1 Ingate SIParator 3.2.1 Ingate SIParator 3.2 Ingate SIParator 4.4 Ingate Firewalll 4.4 Ingate Firewall 4.5.1 Ingate Firewall 4.4.1 Ingate Firewall 4.3.4 Ingate Firewall 4.3.3 Ingate Firewall 4.3.2 Ingate Firewall 4.3.1 Ingate Firewall 4.3 Ingate Firewall 4.2 .3 Ingate Firewall 4.2 .2 Ingate Firewall 4.2 .1 Ingate Firewall 4.1.3 Ingate Firewall 3.3.1 Ingate Firewall 3.2.1 Ingate Firewall 3.2 IBM Hardware Management Console (HMC) for pSeries 5.0 R1.0 IBM Hardware Management Console (HMC) for pSeries 4.0 R5.0 IBM Hardware Management Console (HMC) for pSeries 4.0 R4.0 IBM Hardware Management Console (HMC) for pSeries 4.0 R3.3 IBM Hardware Management Console (HMC) for pSeries 4.0 R3.2 IBM Hardware Management Console (HMC) for pSeries 4.0 R3.1 IBM Hardware Management Console (HMC) for pSeries 4.0 R2.1 IBM Hardware Management Console (HMC) for pSeries 4.0 R2.0 IBM Hardware Management Console (HMC) for pSeries 3.3.7 IBM Hardware Management Console (HMC) for pSeries 3.3.2 IBM Hardware Management Console (HMC) for pSeries 3.0 R3.6 IBM Hardware Management Console (HMC) for pSeries 4 IBM Hardware Management Console (HMC) for pSeries 3 IBM Hardware Management Console (HMC) for iSeries 5.0 R1.0 IBM Hardware Management Console (HMC) for iSeries 4.0 R5.0 IBM Hardware Management Console (HMC) for iSeries 4.0 R4.0 IBM Hardware Management Console (HMC) for iSeries 4.0 R3.3 IBM Hardware Management Console (HMC) for iSeries 4.0 R3.2 IBM Hardware Management Console (HMC) for iSeries 4.0 R3.1 IBM Hardware Management Console (HMC) for iSeries 4.0 R2.1 IBM Hardware Management Console (HMC) for iSeries 4.0 R2.0 IBM Hardware Management Console (HMC) for iSeries 4.0 IBM Hardware Management Console (HMC) for iSeries 3.3.7 IBM Hardware Management Console (HMC) for iSeries 3.3.2 IBM Hardware Management Console (HMC) for iSeries 3.0 R3.6 IBM Hardware Management Console (HMC) 5.2.1 IBM Hardware Management Console (HMC) 3.3.7 HP Tru64 5.1 B-4 HP Tru64 5.1 B-3 HP Systems Management HomePage 2.1.7.168 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.3 .132 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0 HP OpenVMS Secure Web Server 1.2 HP OpenVMS Secure Web Server 1.1 -1 HP OpenVMS Secure Web Server 2.1-1 HP Insight Management Agents for Tru64 UNIX 3.5.2 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.00 Gentoo Linux FreeBSD FreeBSD 6.0 -STABLE FreeBSD FreeBSD 6.0 -RELEASE FreeBSD FreeBSD 5.5 -STABLE FreeBSD FreeBSD 5.5 -RELEASE FreeBSD FreeBSD 5.4 -RELENG FreeBSD FreeBSD 5.4 -RELEASE FreeBSD FreeBSD 5.4 -PRERELEASE FreeBSD FreeBSD 5.3 -STABLE FreeBSD FreeBSD 5.3 -RELENG FreeBSD FreeBSD 5.3 -RELEASE FreeBSD FreeBSD 5.3 FreeBSD FreeBSD 4.11 -STABLE FreeBSD FreeBSD 4.11 -RELENG FreeBSD FreeBSD 4.11 -RELEASE-p3 FreeBSD FreeBSD 4.11 -RELEASE-p20 FreeBSD FreeBSD 4.11 -RELEASE FreeBSD FreeBSD 6.1 -STABLE FreeBSD FreeBSD 6.1 -RELEASE FreeBSD FreeBSD 5.4-STABLE FileZilla FileZilla Server 0.9.17 FileZilla FileZilla Server 0.9.16 b FileZilla FileZilla Server 0.9.9 FileZilla FileZilla Server 0.9.8 c FileZilla FileZilla Server 0.9.8 b FileZilla FileZilla Server 0.9.8 a FileZilla FileZilla Server 0.9.8 FileZilla FileZilla Server 0.7.1 FileZilla FileZilla Server 0.7 FileZilla FileZilla Server 0.9.6 FileZilla FileZilla Server 0.9.5 FileZilla FileZilla Server 0.9.4e FileZilla FileZilla Server 0.9.4d FileZilla FileZilla Server 0.9.3 FileZilla FileZilla Server 0.9.2 FileZilla FileZilla Server 0.9.1b FileZilla FileZilla Server 0.9.0 FileZilla FileZilla Server 0.8.9 FileZilla FileZilla Server 0.8.8 FileZilla FileZilla Server 0.8.7 FileZilla FileZilla Server 0.8.6a FileZilla FileZilla Server 0.8.5 FileZilla FileZilla Server 0.8.4 FileZilla FileZilla Server 0.8.3 FileZilla FileZilla Server 0.8.2 FileZilla FileZilla Server 0.8.1 FileZilla FileZilla 2.2.22 FileZilla FileZilla 2.2.15 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 cwRsync cwRsync 2.0.9 Cisco Works Common Services (CWCS) 3.0 Cisco Works Common Services (CWCS) 2.2 Cisco Wide Area File Services (WAFS) 0 Cisco Wide Area Application Services (WAAS) 0 Cisco Unified Presence Server 1.0(2) Cisco Unified Presence Server 1.0 Cisco SIP Proxy Server Cisco Security Mars 4.2.2 Cisco Security Agent 5.0 .193 Cisco Security Agent 4.5.1 .657 Cisco Security Agent 4.5.1 .639 Cisco Security Agent 4.5.1 Cisco Security Agent 4.5 Cisco Security Agent 4.0.3 .728 Cisco Security Agent 4.0.3 Cisco Security Agent 4.0.2 Cisco Security Agent 4.0.1 Cisco Security Agent 4.0 Cisco Security Agent 2.1 Cisco Security Agent 5.1 Cisco Security Agent 5.0 Cisco Security Agent 3.x Cisco Secure ACS Solution Engine 3.3.2 Cisco Secure ACS Solution Engine 3.3.1 Cisco Secure ACS Solution Engine 3.3 Cisco Secure ACS Solution Engine Cisco Secure ACS for Windows Server 3.2 Cisco Secure ACS for Windows NT 3.3 Cisco Secure ACS for Windows NT 3.2 Cisco Secure ACS for Windows NT 3.1.1 Cisco Secure ACS for Windows NT 3.1 Cisco Secure ACS for Windows NT 3.0.3 Cisco Secure ACS for Windows NT 3.0 .1 Cisco Secure ACS for Windows NT 3.0 Cisco Secure ACS for Windows NT 2.42 Cisco Secure ACS for Windows NT 2.6.4 Cisco Secure ACS for Windows NT 2.6.3 Cisco Secure ACS for Windows NT 2.6.2 Cisco Secure ACS for Windows NT 2.6 Cisco Secure ACS for Windows NT 2.5 Cisco Secure ACS for Windows NT 2.4 Cisco Secure ACS for Windows NT 2.3 Cisco Secure ACS for Windows NT 2.1 Cisco Secure ACS for Unix 2.3.6 .1 Cisco Secure ACS for Unix 2.3.5 .1 Cisco Secure ACS for Unix 2.3 Cisco Secure ACS for Unix 2.0 Cisco ONS 15454SDH 4.6 (1) Cisco ONS 15454SDH 4.6 (0) Cisco ONS 15454SDH 4.5 Cisco ONS 15454SDH 4.1 (3) Cisco ONS 15454SDH 4.1 (2) Cisco ONS 15454SDH 4.1 (1) Cisco ONS 15454SDH 4.1 (0) Cisco ONS 15454SDH 4.0 (2) Cisco ONS 15454SDH 4.0 (1) Cisco ONS 15454SDH 4.0 (0) Cisco ONS 15454SDH 4.0 Cisco ONS 15454SDH 3.4 Cisco ONS 15454SDH 3.3 Cisco ONS 15454SDH 3.2 Cisco ONS 15454SDH 3.1 Cisco ONS 15454SDH 2.3 (5) Cisco ONS 15454E Optical Transport Platform 0 Cisco ONS 15454 Optical Transport Platform 4.14 Cisco ONS 15454 Optical Transport Platform 4.6 (1) Cisco ONS 15454 Optical Transport Platform 4.6 (0) Cisco ONS 15454 Optical Transport Platform 4.5 Cisco ONS 15454 Optical Transport Platform 4.1 (3) Cisco ONS 15454 Optical Transport Platform 4.1 (2) Cisco ONS 15454 Optical Transport Platform 4.1 (1) Cisco ONS 15454 Optical Transport Platform 4.1 (0) Cisco ONS 15454 Optical Transport Platform 4.1 Cisco ONS 15454 Optical Transport Platform 4.0 (2) Cisco ONS 15454 Optical Transport Platform 4.0 (1) Cisco ONS 15454 Optical Transport Platform 4.0 Cisco ONS 15454 Optical Transport Platform 3.4 Cisco ONS 15454 Optical Transport Platform 3.3 Cisco ONS 15454 Optical Transport Platform 3.2 .0 Cisco ONS 15454 Optical Transport Platform 3.1 .0 Cisco ONS 15454 Optical Transport Platform 3.0 Cisco ONS 15454 Optical Transport Platform 2.3 (5) Cisco ONS 15454 MSTP 0 Cisco ONS 15454 MSPP 0 Cisco ONS 15454 IOS-Based Blades Cisco MDS 9500 0 Cisco MDS 9216i Cisco MDS 9000 2.0 (0.86) Cisco MDS 9000 1.3 (4a) Cisco MDS 9000 1.3 (3.33) Cisco MDS 9000 Cisco IDS 0 Cisco GSS 4492 Global Site Selector 0 Cisco GSS 4491 Global Site Selector 0 Cisco GSS 4490 Global Site Selector 0 Cisco GSS 4480 Global Site Selector Cisco CSS11500 Content Services Switch 7.30 (00.09)S Cisco CSS11500 Content Services Switch 7.30 (00.08)S Cisco CSS11500 Content Services Switch 7.20 (03.10)S Cisco CSS11500 Content Services Switch 7.20 (03.09)S Cisco CSS11500 Content Services Switch 7.10 (05.07)S Cisco CSS11500 Content Services Switch 7.5 Cisco CSS11500 Content Services Switch 7.4 Cisco CSS11500 Content Services Switch Cisco CiscoWorks Common Services 2.2 Cisco CiscoWorks Common Management Foundation 2.2 Cisco CiscoWorks Common Management Foundation 2.1 Cisco CiscoWorks Common Management Foundation 2.0 Cisco CiscoWorks Common Management Foundation 0 Cisco CiscoSecure ACS for Windows and Unix 0 Cisco CiscoSecure ACS 1111 Appliance Cisco Call Manager 4.1 (3)SR2 Cisco Call Manager 4.1 (3)SR1 Cisco Call Manager 4.1 (3)ES32 Cisco Call Manager 4.1 (3)ES24 Cisco Call Manager 4.1 (3)ES07 Cisco Call Manager 4.1 (2)ES55 Cisco Call Manager 4.1 (2)ES50 Cisco Call Manager 4.1 (2)ES33 Cisco Call Manager 4.0 (2a)SR2c Cisco Call Manager 4.0 (2a)SR2b Cisco Call Manager 4.0 (2a)ES62 Cisco Call Manager 4.0 (2a)ES56 Cisco Call Manager 4.0 (2a)ES40 Cisco Call Manager 4.0 Cisco Call Manager 5.1 Cisco Call Manager 4.3(1) Cisco Call Manager 4.2(3) Cisco Call Manager 4.1(3)SR4 Cisco Application Control Engine (ACE) Module 0 Cisco Application & Content Networking Software (ACNS) Cisco Aironet 350 ACS350 Firmware 2.6 c Cisco Access Registrar Cisco 4000 Series Airespace Wireless LAN Controller 3.1.59 .24 Cisco 2000 Series Airespace Wireless LAN Controller 3.1.59 .24 Avaya S8710 R2.0.1 Avaya S8710 R2.0.0 Avaya S8710 CM 3.1 Avaya S8700 R2.0.1 Avaya S8700 R2.0.0 Avaya S8700 CM 3.1 Avaya S8500 R2.0.1 Avaya S8500 R2.0.0 Avaya S8500 CM 3.1 Avaya S8500 0 Avaya S8300 R2.0.1 Avaya S8300 R2.0.0 Avaya S8300 CM 3.1 Avaya Predictive Dialing System (PDS) 11.0 Avaya Predictive Dialing System (PDS) 11.11 Avaya Predictive Dialer 0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking Avaya Intuity LX Avaya Converged Communications Server 2.0 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.3.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.3.9 |
| Not Vulnerable: |
Stonesoft StoneGate IPS Sensor and Analyzer 2.0.2 Stonesoft StoneGate High Availability Firewall and VPN 3.0.2 Stonesoft StoneGate High Availability Firewall and VPN 2.6.6 Serv-U FTP Server 6.3.3.1 Secure Computing SnapGear 3.1.4 u2 OpenVPN OpenVPN 2.0.9 OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.7 l IPCop IPCop 1.4.13 Ingate SIParator 4.5.2 Ingate Firewall 4.5.2 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP OpenVMS Secure Web Server 2.2 FileZilla FileZilla Server 0.9.19 FileZilla FileZilla 2.2.28 cwRsync cwRsync 2.0.10 Cisco Security Agent 5.1 .79 Cisco Security Agent 5.0.0.201 Cisco Security Agent 4.5.1.659 Cisco ONS 15454 8.0 Cisco CSS11500 Content Services Switch 8.10.2 .65 Cisco CSS11500 Content Services Switch 7.50.3 .45 |
Discussion
OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability
OpenSSL is prone to a buffer-overflow vulnerability because the library fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successfully exploiting this issue may result in the execution of arbitrary machine code in the context of applications that use the affected library. Failed exploit attempts may crash applications, denying service to legitimate users.
OpenSSL is prone to a buffer-overflow vulnerability because the library fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successfully exploiting this issue may result in the execution of arbitrary machine code in the context of applications that use the affected library. Failed exploit attempts may crash applications, denying service to legitimate users.
Exploit / POC
OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability
Solution:
The vendor has addressed this issue in OpenSSL 0.9.8d and 0.9.7l.
Please see the references for more information.
Turbolinux Turbolinux 10 F...
Secure Computing SnapGear SG560 0
Xerox WorkCentre Pro 245
Xerox WorkCentre 265
Xerox WorkCentre Pro 238
Secure Computing SnapGear SG565 0
Xerox WorkCentre Pro 255
FileZilla FileZilla Server 0.7.1
OpenSSL Project OpenSSL 0.9.7 beta1
OpenSSL Project OpenSSL 0.9.7 a
OpenSSL Project OpenSSL 0.9.7 e
OpenSSL Project OpenSSL 0.9.7 g
OpenSSL Project OpenSSL 0.9.7 f
FileZilla FileZilla Server 0.9.8 b
OpenSSL Project OpenSSL 0.9.8 c
OpenVPN OpenVPN 1.4.3
OpenVPN OpenVPN 2.0.4
HP System Management Homepage 2.1
HP System Management Homepage 2.1.3 .132
HP System Management Homepage 2.1.5
HP Tru64 5.1 B-3
Solution:
The vendor has addressed this issue in OpenSSL 0.9.8d and 0.9.7l.
Please see the references for more information.
Turbolinux Turbolinux 10 F...
-
Turbolinux openssl-0.9.7d-11.i586.rpm
Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssl-0.9.7d-11.i586.rpm -
Turbolinux openssl-compat-0.9.6m-10.i586.rpm
Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssl-compat-0.9.6m-10.i586.rpm -
Turbolinux openssl-devel-0.9.7d-11.i586.rpm
Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssl-devel-0.9.7d-11.i586.rpm
Secure Computing SnapGear SG560 0
-
Secure Computing Secure Computing SnapGear 3.1.4u2
http://www.cyberguard.info/snapgear/releases.html
Xerox WorkCentre Pro 245
-
Xerox cert_P30_ESS_Network_Controller_Patch.zip
http://a1851.g.akamaitech.net/f/1851/2996/24h/cacheB.xerox.com/downloa ds/usa/en/c/cert_P30_ESS_Network_Controller_Patch.zip
Xerox WorkCentre 265
-
Xerox cert_P30_ESS_Network_Controller_Patch.zip
http://a1851.g.akamaitech.net/f/1851/2996/24h/cacheB.xerox.com/downloa ds/usa/en/c/cert_P30_ESS_Network_Controller_Patch.zip
Xerox WorkCentre Pro 238
-
Xerox cert_P30_ESS_Network_Controller_Patch.zip
http://a1851.g.akamaitech.net/f/1851/2996/24h/cacheB.xerox.com/downloa ds/usa/en/c/cert_P30_ESS_Network_Controller_Patch.zip
Secure Computing SnapGear SG565 0
-
Secure Computing Secure Computing SnapGear 3.1.4u2
http://www.cyberguard.info/snapgear/releases.html
Xerox WorkCentre Pro 255
-
Xerox cert_P30_ESS_Network_Controller_Patch.zip
http://a1851.g.akamaitech.net/f/1851/2996/24h/cacheB.xerox.com/downloa ds/usa/en/c/cert_P30_ESS_Network_Controller_Patch.zip
FileZilla FileZilla Server 0.7.1
-
FileZilla FileZilla_Server-0_9_19.exe
http://prdownloads.sourceforge.net/filezilla/FileZilla_Server-0_9_19.e xe?download
OpenSSL Project OpenSSL 0.9.7 beta1
-
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz
OpenSSL Project OpenSSL 0.9.7 a
-
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz -
Slackware openssl-0.9.7l-i386-1_slack9.0.tgz
Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/o penssl-0.9.7l-i386-1_slack9.0.tgz -
Slackware openssl-solibs-0.9.7l-i386-1_slack9.0.tgz
Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/o penssl-solibs-0.9.7l-i386-1_slack9.0.tgz
OpenSSL Project OpenSSL 0.9.7 e
-
Debian libssl-dev_0.9.7e-3sarge3_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_alpha.deb -
Debian libssl-dev_0.9.7e-3sarge3_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_amd64.deb -
Debian libssl-dev_0.9.7e-3sarge3_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_arm.deb -
Debian libssl-dev_0.9.7e-3sarge3_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_hppa.deb -
Debian libssl-dev_0.9.7e-3sarge3_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_i386.deb -
Debian libssl-dev_0.9.7e-3sarge3_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_ia64.deb -
Debian libssl-dev_0.9.7e-3sarge3_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_m68k.deb -
Debian libssl-dev_0.9.7e-3sarge3_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_mips.deb -
Debian libssl-dev_0.9.7e-3sarge3_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_mipsel.deb -
Debian libssl-dev_0.9.7e-3sarge3_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_powerpc.deb -
Debian libssl-dev_0.9.7e-3sarge3_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_s390.deb -
Debian libssl-dev_0.9.7e-3sarge3_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 7e-3sarge3_sparc.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_alpha.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_amd64.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_arm.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_hppa.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_i386.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_ia64.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_m68k.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_mips.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_mipsel.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_powerpc.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_s390.deb -
Debian libssl0.9.7_0.9.7e-3sarge3_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.7_0.9 .7e-3sarge3_sparc.deb -
Debian openssl_0.9.7e-3sarge3_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_alpha.deb -
Debian openssl_0.9.7e-3sarge3_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_amd64.deb -
Debian openssl_0.9.7e-3sarge3_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_arm.deb -
Debian openssl_0.9.7e-3sarge3_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_hppa.deb -
Debian openssl_0.9.7e-3sarge3_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_i386.deb -
Debian openssl_0.9.7e-3sarge3_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_ia64.deb -
Debian openssl_0.9.7e-3sarge3_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_m68k.deb -
Debian openssl_0.9.7e-3sarge3_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_mips.deb -
Debian openssl_0.9.7e-3sarge3_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_mipsel.deb -
Debian openssl_0.9.7e-3sarge3_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_powerpc.deb -
Debian openssl_0.9.7e-3sarge3_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_s390.deb -
Debian openssl_0.9.7e-3sarge3_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.7e- 3sarge3_sparc.deb -
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz -
Slackware openssl-0.9.7l-i486-1_slack10.1.tgz
Slackware 10.1:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ openssl-0.9.7l-i486-1_slack10.1.tgz -
Slackware openssl-solibs-0.9.7l-i486-1_slack10.1.tgz
Slackware 10.1:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ openssl-solibs-0.9.7l-i486-1_slack10.1.tgz -
SuSE openssl-0.9.7e-3.6.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/openssl-0.9.7e-3. 6.i586.rpm -
SuSE openssl-0.9.7e-3.6.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/openssl-0.9.7e- 3.6.x86_64.rpm -
SuSE openssl-devel-0.9.7e-3.6.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/openssl-devel-0.9 .7e-3.6.i586.rpm -
SuSE openssl-devel-0.9.7e-3.6.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/openssl-devel-0 .9.7e-3.6.x86_64.rpm -
Trustix openssl-0.9.7e-8tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-0.9.7l-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-devel-0.9.7e-8tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-devel-0.9.7l-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-python-0.9.7e-8tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-support-0.9.7e-8tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix openssl-support-0.9.7l-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates -
Ubuntu libcrypto0.9.7-udeb_0.9.7e-3ubuntu0.4_amd64.udeb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7e-3ubuntu0.4_amd64.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7e-3ubuntu0.4_i386.udeb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7e-3ubuntu0.4_i386.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7e-3ubuntu0.4_powerpc.udeb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7e-3ubuntu0.4_powerpc.udeb -
Ubuntu libssl-dev_0.9.7e-3ubuntu0.4_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 e-3ubuntu0.4_amd64.deb -
Ubuntu libssl-dev_0.9.7e-3ubuntu0.4_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 e-3ubuntu0.4_i386.deb -
Ubuntu libssl-dev_0.9.7e-3ubuntu0.4_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 e-3ubuntu0.4_powerpc.deb -
Ubuntu libssl0.9.7_0.9.7e-3ubuntu0.4_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7e-3ubuntu0.4_amd64.deb -
Ubuntu libssl0.9.7_0.9.7e-3ubuntu0.4_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7e-3ubuntu0.4_i386.deb -
Ubuntu libssl0.9.7_0.9.7e-3ubuntu0.4_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7e-3ubuntu0.4_powerpc.deb -
Ubuntu openssl_0.9.7e-3ubuntu0.4_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7e-3 ubuntu0.4_amd64.deb -
Ubuntu openssl_0.9.7e-3ubuntu0.4_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7e-3 ubuntu0.4_i386.deb -
Ubuntu openssl_0.9.7e-3ubuntu0.4_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7e-3 ubuntu0.4_powerpc.deb
OpenSSL Project OpenSSL 0.9.7 g
-
Mandriva lib64openssl0.9.7-0.9.7g-2.4.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-0.9.7g-2.4.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-devel-0.9.7g-2.4.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-devel-0.9.7g-2.4.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-static-devel-0.9.7g-2.4.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva lib64openssl0.9.7-static-devel-0.9.7g-2.4.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-0.9.7g-2.4.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-0.9.7g-2.4.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-devel-0.9.7g-2.4.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-devel-0.9.7g-2.4.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-static-devel-0.9.7g-2.4.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva libopenssl0.9.7-static-devel-0.9.7g-2.4.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7g-2.4.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7g-2.4.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7g-2.4.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
Mandriva openssl-0.9.7g-2.4.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download -
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz -
Slackware openssl-solibs-0.9.7l-i486-1_slack10.2.tgz
Slackware 10.2:
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ openssl-solibs-0.9.7l-i486-1_slack10.2.tgz -
SuSE openssl-0.9.7g-2.10.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/openssl-0.9.7g-2 .10.i586.rpm -
SuSE openssl-0.9.7g-2.10.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/openssl-0.9.7g-2. 10.ppc.rpm -
SuSE openssl-0.9.7g-2.10.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/openssl-0.9.7g -2.10.x86_64.rpm -
SuSE openssl-32bit-0.9.7g-2.10.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/openssl-32bit- 0.9.7g-2.10.x86_64.rpm -
SuSE openssl-devel-0.9.7g-2.10.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/openssl-devel-0. 9.7g-2.10.i586.rpm -
SuSE openssl-devel-0.9.7g-2.10.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/openssl-devel-0.9 .7g-2.10.ppc.rpm -
SuSE openssl-devel-0.9.7g-2.10.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/openssl-devel- 0.9.7g-2.10.x86_64.rpm -
SuSE openssl-devel-32bit-0.9.7g-2.10.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/openssl-devel- 32bit-0.9.7g-2.10.x86_64.rpm -
Ubuntu libcrypto0.9.7-udeb_0.9.7g-1ubuntu1.3_amd64.udeb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7g-1ubuntu1.3_amd64.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7g-1ubuntu1.3_i386.udeb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7g-1ubuntu1.3_i386.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7g-1ubuntu1.3_powerpc.udeb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7g-1ubuntu1.3_powerpc.udeb -
Ubuntu libcrypto0.9.7-udeb_0.9.7g-1ubuntu1.3_sparc.udeb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.7-u deb_0.9.7g-1ubuntu1.3_sparc.udeb -
Ubuntu libssl-dev_0.9.7g-1ubuntu1.3_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 g-1ubuntu1.3_amd64.deb -
Ubuntu libssl-dev_0.9.7g-1ubuntu1.3_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 g-1ubuntu1.3_i386.deb -
Ubuntu libssl-dev_0.9.7g-1ubuntu1.3_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 g-1ubuntu1.3_powerpc.deb -
Ubuntu libssl-dev_0.9.7g-1ubuntu1.3_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.7 g-1ubuntu1.3_sparc.deb -
Ubuntu libssl0.9.7_0.9.7g-1ubuntu1.3_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7g-1ubuntu1.3_amd64.deb -
Ubuntu libssl0.9.7_0.9.7g-1ubuntu1.3_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7g-1ubuntu1.3_i386.deb -
Ubuntu libssl0.9.7_0.9.7g-1ubuntu1.3_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7g-1ubuntu1.3_powerpc.deb -
Ubuntu libssl0.9.7_0.9.7g-1ubuntu1.3_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.7_0.9. 7g-1ubuntu1.3_sparc.deb -
Ubuntu openssl_0.9.7g-1ubuntu1.3_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7g-1 ubuntu1.3_amd64.deb -
Ubuntu openssl_0.9.7g-1ubuntu1.3_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7g-1 ubuntu1.3_i386.deb -
Ubuntu openssl_0.9.7g-1ubuntu1.3_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7g-1 ubuntu1.3_powerpc.deb -
Ubuntu openssl_0.9.7g-1ubuntu1.3_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.7g-1 ubuntu1.3_sparc.deb
OpenSSL Project OpenSSL 0.9.7 f
-
OpenSSL openssl-0.9.7l.tar.gz
http://www.openssl.org/source/openssl-0.9.7l.tar.gz
FileZilla FileZilla Server 0.9.8 b
-
FileZilla FileZilla_Server-0_9_19.exe
http://prdownloads.sourceforge.net/filezilla/FileZilla_Server-0_9_19.e xe?download
OpenSSL Project OpenSSL 0.9.8 c
-
OpenSSL openssl-0.9.8d.tar.gz
http://www.openssl.org/source/openssl-0.9.8d.tar.gz
OpenVPN OpenVPN 1.4.3
-
OpenVPN openvpn-2.0.9.tar.gz
http://openvpn.net/download.html#stable
OpenVPN OpenVPN 2.0.4
-
OpenVPN openvpn-2.0.9.tar.gz
http://openvpn.net/download.html#stable
HP System Management Homepage 2.1
-
HP HP System Management Homepage for Linux (AMD64/EM64T) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26866.html -
HP HP System Management Homepage for Linux (x86) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26864.html -
HP HP System Management Homepage for Windows version 2.1.8-179
http://h18023.www1.hp.com/support/files/server/us/download/26977.html
HP System Management Homepage 2.1.3 .132
-
HP HP System Management Homepage for Linux (AMD64/EM64T) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26866.html -
HP HP System Management Homepage for Linux (x86) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26864.html -
HP HP System Management Homepage for Windows version 2.1.8-179
http://h18023.www1.hp.com/support/files/server/us/download/26977.html
HP System Management Homepage 2.1.5
-
HP HP System Management Homepage for Linux (AMD64/EM64T) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26866.html -
HP HP System Management Homepage for Linux (x86) version 2.1.8-177
http://h18023.www1.hp.com/support/files/server/us/download/26864.html -
HP HP System Management Homepage for Windows version 2.1.8-179
http://h18023.www1.hp.com/support/files/server/us/download/26977.html
HP Tru64 5.1 B-3
-
HP HP Tru64 UNIX Version 5.1B-3 ERP Kit
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT1001 163-V51BB26-ES-20070315
References
OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability
References:
References:
- ASA-2006-260 - HP-UX OpenSSL Denial of Service (DoS), Increase Privilege (HPSBUX (Avaya)
- Cisco Applied Intelligence Response: Detecting and Mitigating Exploitation of Mu (Cisco)
- Cisco Security Response: Multiple Vulnerabilities in OpenSSL library (Cisco)
- Critical Patch Update - January 2007 (Oracle)
- cwRsync 2.0.10 released (cwRsync)
- HPSBTU02207 SSRT061213, SSRT061239, SSRT071304 rev.1 - HP Tru64 UNIX SSL and BIN (HP)
- HPSBUX02174 SSRT061239 rev.1 HP-UX Running OpenSSL Denial of Service (DoS), Incr (HP)
- IBM Hardware Management Console (IBM)
- IPCop 1.4.13 released (IPCop)
- Kolab Security Issue 11 20061002 (Kolab)
- Release notice for Ingate Firewall 4.5.2 and Ingate SIParator 4.5.2 (Ingate)
- SnapGear Firmware Release Notes (Secure Computing)
- Stonesoft Corp. Security Advisory - OpenSSL vulnerabilities in Stonesoft product (Stonesoft)
- Sun Alert ID: 102711 (Sun)
- Vulnerability Note VU#547300 (US-CERT)
- Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow ([email protected])
- HPSBMA02566 SSRT100045 rev.1 - HP System Management Homepage (SMH) for Linux and (HP)
- RHSA-2008:0264-3 Moderate: Red Hat Network Satellite Server Solaris client secur (Red Hat)
- RHSA-2008:0525-5 Red Hat Network Satellite Server Solaris client security update (Red Hat)
- RHSA-2008:0629-3 Moderate: Red Hat Network Satellite Server Solaris client secur (Red Hat)
- Sun Alert ID: 102668 - Security Vulnerabilities In OpenSSL Affect Sun Grid Engin (Sun)
- Technical Bulletin Security Advisory - Document ID 2006007439 (Nortel Networks)
- XEROX SECURITY BULLETIN XRX07-001 (XEROX)