OpenSSL 'EVP_VerifyFinal' Function Signature Verification Vulnerability
BID:33150
Info
OpenSSL 'EVP_VerifyFinal' Function Signature Verification Vulnerability
| Bugtraq ID: | 33150 |
| Class: | Design Error |
| CVE: |
CVE-2008-5077 CVE-2009-0021 CVE-2009-0046 CVE-2009-0047 CVE-2009-0048 CVE-2009-0049 CVE-2009-0124 CVE-2009-0265 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 07 2009 12:00AM |
| Updated: | Apr 13 2015 10:13PM |
| Credit: | Google Security Team |
| Vulnerable: |
VooDoo cIRCle 1.1 VMWare ESX Server 3.0.3 VMWare ESX Server 3.0.2 VMWare ESX Server 2.5.5 VMWare ESX Server 4.0 VMWare ESX Server 3.5 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Turbolinux wizpy 0 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Server 11 x64 Turbolinux Turbolinux Server 11 Turbolinux Turbolinux Server 10.0.0 x64 TurboLinux Personal TurboLinux Multimedia Turbolinux FUJI 0 Turbolinux Client 2008 Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server Hosting Edition 1.0 Turbolinux Appliance Server 1.0 Workgroup Edition Turbolinux Appliance Server 1.0 Hosting Edition Turbolinux Appliance Server 2.0 SuSE SUSE Linux Enterprise Teradata 10 SP3 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 8 SuSE SUSE Linux Enterprise Server 10 SP4 SuSE SUSE Linux Enterprise Server 10 SP3 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE Suse Linux Enterprise Desktop 11 SP1 SuSE Suse Linux Enterprise Desktop 10 SP4 SuSE Suse Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO Sun Sun SPARC Enterprise M9000 Sun Sun SPARC Enterprise M8000 Sun Sun SPARC Enterprise M5000 Sun Sun SPARC Enterprise M4000 Sun Sun SPARC Enterprise M3000 Sun SPARC T3-4 0 Sun SPARC T3-2 0 Sun SPARC T3-1B 0 Sun SPARC T3-1 0 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun Netra SPARC T3-1B 0 Sun Netra SPARC T3-1 0 Sun Grid Engine 5.3 x86 Sun Grid Engine 5.3 Sun Linux Sun Grid Engine 5.3 64-bit SPARC Sun Grid Engine 5.3 32-bit SPARC Sun Grid Engine 5.3 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 S.u.S.E. openSUSE 11.4 S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 rPath rPath Linux 2 rPath rPath Linux 1 rPath Appliance Platform Linux Service 2 rPath Appliance Platform Linux Service 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 IA64 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 IA64 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 IA64 Redhat Enterprise Linux AS 2.1 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Redhat Desktop 3.0 Pardus Linux 2008 0 OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 e OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 0.9.7 m OpenSSL Project OpenSSL 0.9.7 l OpenSSL Project OpenSSL 0.9.7 k OpenSSL Project OpenSSL 0.9.7 j OpenSSL Project OpenSSL 0.9.7 i OpenSSL Project OpenSSL 0.9.7 h OpenSSL Project OpenSSL 0.9.7 g OpenSSL Project OpenSSL 0.9.7 f OpenSSL Project OpenSSL 0.9.7 e OpenSSL Project OpenSSL 0.9.7 d OpenSSL Project OpenSSL 0.9.7 c OpenSSL Project OpenSSL 0.9.7 beta3 OpenSSL Project OpenSSL 0.9.7 beta2 OpenSSL Project OpenSSL 0.9.7 beta1 OpenSSL Project OpenSSL 0.9.7 b OpenSSL Project OpenSSL 0.9.7 a OpenSSL Project OpenSSL 0.9.7 OpenSSL Project OpenSSL 0.9.6 m OpenSSL Project OpenSSL 0.9.6 l OpenSSL Project OpenSSL 0.9.6 k OpenSSL Project OpenSSL 0.9.6 j OpenSSL Project OpenSSL 0.9.6 i OpenSSL Project OpenSSL 0.9.6 h OpenSSL Project OpenSSL 0.9.6 g OpenSSL Project OpenSSL 0.9.6 f OpenSSL Project OpenSSL 0.9.6 e OpenSSL Project OpenSSL 0.9.6 d OpenSSL Project OpenSSL 0.9.6 c OpenSSL Project OpenSSL 0.9.6 b-36.8 OpenSSL Project OpenSSL 0.9.6 b OpenSSL Project OpenSSL 0.9.6 a OpenSSL Project OpenSSL 0.9.6 OpenSSL Project OpenSSL 0.9.5 a OpenSSL Project OpenSSL 0.9.5 OpenSSL Project OpenSSL 0.9.4 OpenSSL Project OpenSSL 0.9.3 OpenSSL Project OpenSSL 0.9.2 b OpenSSL Project OpenSSL 0.9.1 c OpenSSL Project OpenSSL 0.9.8g OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 f OpenBSD OpenBSD 4.4 OpenBSD OpenBSD 4.3 NTP NTP 4.2.5 p150 NTP NTP 4.2.4 p5 Nortel Networks VPN Router 5000 Nortel Networks VPN Router 2700 Nortel Networks VPN Router 251 0 Nortel Networks VPN Router 221 0 Nortel Networks VPN Router 1750 0 Nortel Networks VPN Router 1740 Nortel Networks VPN Router 1700 Nortel Networks VPN Router 1100 Nortel Networks VPN Router 1050 Nortel Networks VPN Router 1010 Nortel Networks VPN Router - Contivity 4600 0 Nortel Networks VPN Router - Contivity 4500 0 Nortel Networks VPN Router - Contivity 2600 0 Nortel Networks VPN Router Nortel Networks VPN 3070 0 Nortel Networks VPN 3050 0 Nortel Networks Switched Firewall 6600 series Nortel Networks Switched Firewall 6400 series Nortel Networks Switched Firewall 5700 series Nortel Networks Switched Firewall 5400 series Nortel Networks Switched Firewall 5300 series Nortel Networks SSL VPN Module 1000 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Enterprise VoIP TM-CS1000 Nortel Networks CS 1000 McAfee Email and Web Security Appliance 5.6 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 ISC BIND 9.6 ISC BIND 9.5 a2 ISC BIND 9.5 a1 ISC BIND 9.4.3 ISC BIND 9.4.1 -P1 ISC BIND 9.4.1 ISC BIND 9.4 rc2 ISC BIND 9.4 rc1 ISC BIND 9.4 b4 ISC BIND 9.4 b3 ISC BIND 9.4 b3 ISC BIND 9.4 b2 ISC BIND 9.4 b1 ISC BIND 9.4 a6 ISC BIND 9.4 a5 ISC BIND 9.4 a4 ISC BIND 9.4 a3 ISC BIND 9.4 a2 ISC BIND 9.4 a1 ISC BIND 9.4 ISC BIND 9.3.6 ISC BIND 9.3.5 ISC BIND 9.3.4 ISC BIND 9.3.3 ISC BIND 9.3.2 ISC BIND 9.3.1 ISC BIND 9.3 ISC BIND 9.2.8 ISC BIND 9.2.7 rc3 ISC BIND 9.2.7 rc2 ISC BIND 9.2.7 rc1 ISC BIND 9.2.7 b1 ISC BIND 9.2.7 ISC BIND 9.2.6 -P2 ISC BIND 9.2.6 -P1 ISC BIND 9.2.6 ISC BIND 9.2.5 ISC BIND 9.2.4 ISC BIND 9.2.3 ISC BIND 9.2.2 ISC BIND 9.2.1 ISC BIND 9.2 ISC BIND 9.1.3 ISC BIND 9.1.2 ISC BIND 9.1.1 ISC BIND 9.1 ISC BIND 9.0.1 ISC BIND 9.0 ISC BIND 9.5.1b1 ISC BIND 9.5.0b2 ISC BIND 9.5.0b1 ISC BIND 9.5.0a7 ISC BIND 9.5.0a6 ISC BIND 9.5.0a5 ISC BIND 9.5.0a4 ISC BIND 9.5.0a3 ISC BIND 9.5.0-P2-W2 ISC BIND 9.5.0-P2-W1 ISC BIND 9.5.0-P2 ISC BIND 9.4.2-P2-W2 ISC BIND 9.4.2-P2-W1 ISC BIND 9.4.2-P2 Ingate SIParator 4.6.4 Ingate SIParator 4.6.1 Ingate SIParator 4.6 Ingate SIParator 4.5.2 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2.3 Ingate SIParator 4.2.2 Ingate SIParator 4.2.1 Ingate SIParator 3.3.1 Ingate SIParator 3.2.1 Ingate SIParator 3.2 Ingate SIParator 3.1 Ingate SIParator 4.4 Ingate Firewalll 4.4 Ingate Firewall 4.6.4 Ingate Firewall 4.6.1 Ingate Firewall 4.6 Ingate Firewall 4.5.2 Ingate Firewall 4.5.1 Ingate Firewall 4.4.1 Ingate Firewall 4.3.4 Ingate Firewall 4.3.3 Ingate Firewall 4.3.2 Ingate Firewall 4.3.1 Ingate Firewall 4.3 Ingate Firewall 4.2 .3 Ingate Firewall 4.2 .2 Ingate Firewall 4.2 .1 Ingate Firewall 4.1.3 Ingate Firewall 3.3.1 Ingate Firewall 3.2.1 Ingate Firewall 3.2 Ingate Firewall 3.1 HP System Management Homepage 2.2.9 .1 HP System Management Homepage 2.2.8 HP System Management Homepage 2.2.6 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP SSL for OpenVMS 1.3 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux Gale Gale 0.99 FreeBSD FreeBSD 7.1-STABLE FreeBSD FreeBSD 7.1 -RELEASE-p1 FreeBSD FreeBSD 7.1 -PRE-RELEASE FreeBSD FreeBSD 7.0-STABLE FreeBSD FreeBSD 7.0-RELEASE-p8 FreeBSD FreeBSD 7.0-RELEASE FreeBSD FreeBSD 7.0 BETA4 FreeBSD FreeBSD 7.0 -RELENG FreeBSD FreeBSD 7.0 -PRERELEASE FreeBSD FreeBSD 7.0 FreeBSD FreeBSD 6.4-RELEASE-p2 FreeBSD FreeBSD 6.4 -STABLE FreeBSD FreeBSD 6.4 -RELEASE FreeBSD FreeBSD 6.3 -RELENG FreeBSD FreeBSD 6.3 -RELEASE-p8 FreeBSD FreeBSD 6.3 -RELEASE-p6 FreeBSD FreeBSD 6.3 FreeBSD FreeBSD 6.2 -STABLE FreeBSD FreeBSD 6.2 -RELENG FreeBSD FreeBSD 6.2 F5 WANJet 5.0.2 F5 WANJet 4.2.8 F5 WANJet 5.0 F5 WANJet 4.2.16 F5 WANJet 4.2 F5 FirePass 6.0.3 F5 FirePass 6.0.2 F5 FirePass 6.0.1 F5 FirePass 5.5.2 F5 FirePass 7.0 F5 FirePass 6.1 F5 FirePass 6.0.2.3 F5 FirePass 6.0 F5 FirePass 5.5 F5 Enterprise Manager 1.4.1 F5 Enterprise Manager 1.8 F5 Enterprise Manager 1.6 F5 Enterprise Manager 1.4 F5 BigIP SAM 8.0 F5 BigIP Global Traffic Manager (GTM) 10.0 F5 BigIP Global Traffic Manager (GTM) 9.4.8 F5 BigIP Global Traffic Manager (GTM) 9.3.1 F5 BigIP Global Traffic Manager (GTM) 9.4 F5 BigIP Global Traffic Manager (GTM) 9.3 F5 BigIP Application Security Manager (ASM) 10.0 F5 BigIP Application Security Manager (ASM) 9.4.8 F5 BigIP Application Security Manager (ASM) 9.3.1 F5 BigIP Application Security Manager (ASM) 9.4 F5 BigIP Application Security Manager (ASM) 9.3 F5 BIG-IP WebAccelerator 10.0 F5 BIG-IP WebAccelerator 9.4.8 F5 BIG-IP WebAccelerator 9.4 F5 BIG-IP WAN Optimization Module 10.0 F5 BIG-IP PSM 10.0 F5 BIG-IP PSM 9.4.8 F5 BIG-IP PSM 9.4.5 F5 BIG-IP Local Traffic Manager (LTM) 10.0 F5 BIG-IP Local Traffic Manager (LTM) 9.6.1 F5 BIG-IP Local Traffic Manager (LTM) 9.4.8 F5 BIG-IP Local Traffic Manager (LTM) 9.3.1 F5 BIG-IP Local Traffic Manager (LTM) 9.6 F5 BIG-IP Local Traffic Manager (LTM) 9.4 F5 BIG-IP Local Traffic Manager (LTM) 9.3 F5 BIG-IP Link Controller 10.0 F5 BIG-IP Link Controller 9.4.8 F5 BIG-IP Link Controller 9.3.1 F5 BIG-IP Link Controller 9.4 F5 BIG-IP Link Controller 9.3 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 cwRsync cwRsync 3.0 cwRsync cwRsync 2.1.5 cwRsync cwRsync 2.1.4 cwRsync cwRsync 2.1.3 cwRsync cwRsync 2.1.2 cwRsync cwRsync 2.1.1 cwRsync cwRsync 2.1 cwRsync cwRsync 2.0.10 cwRsync cwRsync 2.0.9 Bsdperimeter pfSense 1.2.1 Bsdperimeter pfSense 1.2-RC4 Bsdperimeter pfSense 1.2-RC3 Bsdperimeter pfSense 1.2-RC2 Bsdperimeter pfSense 1.2-RC1 Bsdperimeter pfSense 1.2 Belgium eID Middleware 2.6 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Voice Portal 3.0 Avaya Proactive Contact 3.0.2 Avaya Proactive Contact 4.0 Avaya Proactive Contact 3.0 Avaya Proactive Contact 0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking MN 3.1 Avaya Message Networking 3.1 Avaya Message Networking Avaya Meeting Exchange - Enterprise Edition Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 Avaya Intuity AUDIX LX 2.0 Avaya Intuity AUDIX LX 1.0 Avaya Communication Manager Server S8700 Avaya Communication Manager Server S8500 Avaya Communication Manager Server S8300 Avaya Communication Manager Server S8100 Avaya Communication Manager Server DEFINITY Server SI/CS Avaya Communication Manager Server DEFINITY Server R9 Avaya Communication Manager Server DEFINITY Server R11 Avaya Communication Manager Server DEFINITY Server R10 Avaya Communication Manager 4.0.3 SP1 Avaya Communication Manager 3.1.4 SP2 Avaya Communication Manager 2.0.1 Avaya Communication Manager 2.0 Avaya Communication Manager 1.3.1 Avaya Communication Manager 1.1 Avaya Communication Manager 5.1 Avaya Communication Manager 5.0 SP3 Avaya Communication Manager 5.0 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 Avaya Communication Manager 3.0 Avaya Communication Manager 2.2 Avaya Communication Manager 2.1 Avaya Aura SIP Enablement Services 3.1.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 3.1 Avaya Aura SIP Enablement Services 3.0 Avaya Aura Application Enablement Services 4.2.3 Avaya Aura Application Enablement Services 4.2.1 Avaya Aura Application Enablement Services 4.0.1 Avaya Aura Application Enablement Services 3.1.6 Avaya Aura Application Enablement Services 3.1.5 Avaya Aura Application Enablement Services 3.1.4 Avaya Aura Application Enablement Services 3.1.3 Avaya Aura Application Enablement Services 4.2 Avaya Aura Application Enablement Services 4.1 Avaya Aura Application Enablement Services 4.0 Avaya Aura Application Enablement Services 3.1 Avaya Aura Application Enablement Services 3.0 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5 American Radio Relay League tqsllib 2.0 |
| Not Vulnerable: |
VooDoo cIRCle 1.1.34 Sun OpenSolaris build snv_107 Sun Grid Engine 6.0 OpenSSL Project OpenSSL 0.9.8 j NTP NTP 4.2.5 p153 NTP NTP 4.2.4 p6 McAfee Email and Web Security Appliance 5.6 Patch 5 ISC BIND 9.5.1 P1 ISC BIND 9.3.6 P1 ISC BIND 9.6.0-P1 ISC BIND 9.4.3-P1 Ingate SIParator 4.7.1 Ingate Firewall 4.7.1 HP System Management Homepage 3.0.1 .73 F5 Enterprise Manager 2.0 F5 BigIP Global Traffic Manager (GTM) 10.0.1 F5 BigIP Application Security Manager (ASM) 10.0.1 F5 BIG-IP WAN Optimization Module 10.0.1 F5 BIG-IP Local Traffic Manager (LTM) 10.0.1 cwRsync cwRsync 3.0.1 Bsdperimeter pfSense 1.2.2 Apple Mac OS X Server 10.5.7 Apple Mac OS X 10.5.7 |
Discussion
OpenSSL 'EVP_VerifyFinal' Function Signature Verification Vulnerability
OpenSSL is prone to a signature-verification vulnerability.
An attacker would likely leverage this issue to conduct phishing attacks or impersonate legitimate sites. Other attacks are also possible.
Releases prior to OpenSSL 0.9.8j are affected.
OpenSSL is prone to a signature-verification vulnerability.
An attacker would likely leverage this issue to conduct phishing attacks or impersonate legitimate sites. Other attacks are also possible.
Releases prior to OpenSSL 0.9.8j are affected.
Exploit / POC
OpenSSL 'EVP_VerifyFinal' Function Signature Verification Vulnerability
An attacker may use readily available utilities to carry out this attack.
An attacker may use readily available utilities to carry out this attack.
Solution / Fix
OpenSSL 'EVP_VerifyFinal' Function Signature Verification Vulnerability
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 8.10 powerpc
Bsdperimeter pfSense 1.2-RC4
Ubuntu Ubuntu Linux 8.10 sparc
S.u.S.E. openSUSE 11.0
Mandriva Linux Mandrake 2009.0 x86_64
Debian Linux 4.0 arm
Debian Linux 4.0 m68k
Ubuntu Ubuntu Linux 8.04 LTS i386
OpenSSL Project OpenSSL 0.9.3
OpenSSL Project OpenSSL 0.9.6 b-36.8
OpenSSL Project OpenSSL 0.9.6 i
OpenSSL Project OpenSSL 0.9.7 beta1
OpenSSL Project OpenSSL 0.9.7 a
OpenSSL Project OpenSSL 0.9.7 e
OpenSSL Project OpenSSL 0.9.7 g
OpenSSL Project OpenSSL 0.9.7 f
OpenSSL Project OpenSSL 0.9.8 c
Bsdperimeter pfSense 1.2.1
Apple Mac OS X Server 10.5.2
Apple Mac OS X 10.5.6
cwRsync cwRsync 2.1
cwRsync cwRsync 2.1.1
HP System Management Homepage 2.1.5
HP System Management Homepage 2.1.9
HP System Management Homepage 2.2.8
VMWare ESX Server 3.0.3
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 8.10 powerpc
-
Ubuntu bind9-doc_9.5.0.dfsg.P2-1ubuntu3.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.5.0.df sg.P2-1ubuntu3.1_all.deb -
Ubuntu bind9-host_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/bind9-host_9.5.0.dfsg.P2-1ub untu3.1_powerpc.deb -
Ubuntu bind9_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/bind9_9.5.0.dfsg.P2-1ubuntu3 .1_powerpc.deb -
Ubuntu bind9utils_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/bind9utils_9.5.0.dfsg.P2-1ub untu3.1_powerpc.deb -
Ubuntu dnsutils_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/dnsutils_9.5.0.dfsg.P2-1ubun tu3.1_powerpc.deb -
Ubuntu libbind-dev_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libbind-dev_9.5.0.dfsg.P2-1u buntu3.1_powerpc.deb -
Ubuntu libbind9-40_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libbind9-40_9.5.0.dfsg.P2-1u buntu3.1_powerpc.deb -
Ubuntu libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.1_powerpc.udeb
http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -10.1ubuntu2.1_powerpc.udeb -
Ubuntu libdns43_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libdns43_9.5.0.dfsg.P2-1ubun tu3.1_powerpc.deb -
Ubuntu libisc44_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libisc44_9.5.0.dfsg.P2-1ubun tu3.1_powerpc.deb -
Ubuntu libisccc40_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libisccc40_9.5.0.dfsg.P2-1ub untu3.1_powerpc.deb -
Ubuntu libisccfg40_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libisccfg40_9.5.0.dfsg.P2-1u buntu3.1_powerpc.deb -
Ubuntu liblwres40_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/b/bind9/liblwres40_9.5.0.dfsg.P2-1ub untu3.1_powerpc.deb -
Ubuntu libssl-dev_0.9.8g-10.1ubuntu2.1_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubun tu2.1_powerpc.deb -
Ubuntu libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.1_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10. 1ubuntu2.1_powerpc.deb -
Ubuntu libssl0.9.8_0.9.8g-10.1ubuntu2.1_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubu ntu2.1_powerpc.deb -
Ubuntu lwresd_9.5.0.dfsg.P2-1ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/universe/b/bind9/lwresd_9.5.0.dfsg.P2-1ub untu3.1_powerpc.deb -
Ubuntu openssl-doc_0.9.8g-10.1ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-10.1ubuntu2.1_all.deb -
Ubuntu openssl_0.9.8g-10.1ubuntu2.1_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2 .1_powerpc.deb
Bsdperimeter pfSense 1.2-RC4
-
BSD Perimeter pfSense-Full-Update-1.2.2.tgz
http://files.pfsense.org/mirror/updates/pfSense-Full-Update-1.2.2.tgz
Ubuntu Ubuntu Linux 8.10 sparc
-
Ubuntu bind9-doc_9.5.0.dfsg.P2-1ubuntu3.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.5.0.df sg.P2-1ubuntu3.1_all.deb -
Ubuntu bind9-host_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/bind9-host_9.5.0.dfsg.P2-1ub untu3.1_sparc.deb -
Ubuntu bind9_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/bind9_9.5.0.dfsg.P2-1ubuntu3 .1_sparc.deb -
Ubuntu bind9utils_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/bind9utils_9.5.0.dfsg.P2-1ub untu3.1_sparc.deb -
Ubuntu dnsutils_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/dnsutils_9.5.0.dfsg.P2-1ubun tu3.1_sparc.deb -
Ubuntu libbind-dev_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libbind-dev_9.5.0.dfsg.P2-1u buntu3.1_sparc.deb -
Ubuntu libbind9-40_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libbind9-40_9.5.0.dfsg.P2-1u buntu3.1_sparc.deb -
Ubuntu libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.1_sparc.udeb
http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -10.1ubuntu2.1_sparc.udeb -
Ubuntu libdns43_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libdns43_9.5.0.dfsg.P2-1ubun tu3.1_sparc.deb -
Ubuntu libisc44_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libisc44_9.5.0.dfsg.P2-1ubun tu3.1_sparc.deb -
Ubuntu libisccc40_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libisccc40_9.5.0.dfsg.P2-1ub untu3.1_sparc.deb -
Ubuntu libisccfg40_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/libisccfg40_9.5.0.dfsg.P2-1u buntu3.1_sparc.deb -
Ubuntu liblwres40_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/b/bind9/liblwres40_9.5.0.dfsg.P2-1ub untu3.1_sparc.deb -
Ubuntu libssl-dev_0.9.8g-10.1ubuntu2.1_sparc.deb
http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubun tu2.1_sparc.deb -
Ubuntu libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.1_sparc.deb
http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10. 1ubuntu2.1_sparc.deb -
Ubuntu libssl0.9.8_0.9.8g-10.1ubuntu2.1_sparc.deb
http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubu ntu2.1_sparc.deb -
Ubuntu lwresd_9.5.0.dfsg.P2-1ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/universe/b/bind9/lwresd_9.5.0.dfsg.P2-1ub untu3.1_sparc.deb -
Ubuntu openssl-doc_0.9.8g-10.1ubuntu2.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-10.1ubuntu2.1_all.deb -
Ubuntu openssl_0.9.8g-10.1ubuntu2.1_sparc.deb
http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2 .1_sparc.deb
S.u.S.E. openSUSE 11.0
-
S.u.S.E. libopenssl-devel-0.9.8g-47.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/libopen ssl-devel-0.9.8g-47.2.i586.rpm -
S.u.S.E. libopenssl-devel-0.9.8g-47.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/libopens sl-devel-0.9.8g-47.2.ppc.rpm -
S.u.S.E. libopenssl-devel-0.9.8g-47.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/libop enssl-devel-0.9.8g-47.2.x86_64.rpm -
S.u.S.E. libopenssl0_9_8-0.9.8g-47.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/libopen ssl0_9_8-0.9.8g-47.2.i586.rpm -
S.u.S.E. libopenssl0_9_8-0.9.8g-47.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/libopens sl0_9_8-0.9.8g-47.2.ppc.rpm -
S.u.S.E. libopenssl0_9_8-0.9.8g-47.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/libop enssl0_9_8-0.9.8g-47.2.x86_64.rpm -
S.u.S.E. libopenssl0_9_8-32bit-0.9.8g-47.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/libop enssl0_9_8-32bit-0.9.8g-47.2.x86_64.rpm -
S.u.S.E. libopenssl0_9_8-64bit-0.9.8g-47.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/libopens sl0_9_8-64bit-0.9.8g-47.2.ppc.rpm -
S.u.S.E. openssl-0.9.8g-47.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/openssl -0.9.8g-47.2.i586.rpm -
S.u.S.E. openssl-0.9.8g-47.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/openssl- 0.9.8g-47.2.ppc.rpm -
S.u.S.E. openssl-0.9.8g-47.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/opens sl-0.9.8g-47.2.x86_64.rpm -
S.u.S.E. openssl-certs-0.9.8g-47.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/openssl -certs-0.9.8g-47.2.i586.rpm -
S.u.S.E. openssl-certs-0.9.8g-47.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/openssl- certs-0.9.8g-47.2.ppc.rpm -
S.u.S.E. openssl-certs-0.9.8g-47.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/opens sl-certs-0.9.8g-47.2.x86_64.rpm -
S.u.S.E. openssl-doc-0.9.8g-47.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/openssl -doc-0.9.8g-47.2.i586.rpm -
S.u.S.E. openssl-doc-0.9.8g-47.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/openssl- doc-0.9.8g-47.2.ppc.rpm -
S.u.S.E. openssl-doc-0.9.8g-47.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/opens sl-doc-0.9.8g-47.2.x86_64.rpm
Mandriva Linux Mandrake 2009.0 x86_64
-
Mandriva ntp-4.2.4-18.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva ntp-client-4.2.4-18.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva ntp-doc-4.2.4-18.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/
Debian Linux 4.0 arm
-
Debian liblasso-java_0.6.5-3+etch1_arm.deb
http://security.debian.org/pool/updates/main/l/lasso/liblasso-java_0.6 .5-3+etch1_arm.deb -
Debian liblasso3-dev_0.6.5-3+etch1_arm.deb
http://security.debian.org/pool/updates/main/l/lasso/liblasso3-dev_0.6 .5-3+etch1_arm.deb -
Debian liblasso3_0.6.5-3+etch1_arm.deb
http://security.debian.org/pool/updates/main/l/lasso/liblasso3_0.6.5-3 +etch1_arm.deb -
Debian ntp-doc_4.2.2.p4+dfsg-2etch1_all.deb
http://security.debian.org/pool/updates/main/n/ntp/ntp-doc_4.2.2.p4+df sg-2etch1_all.deb -
Debian ntp-refclock_4.2.2.p4+dfsg-2etch1_all.deb
http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.2. p4+dfsg-2etch1_all.deb -
Debian ntp-simple_4.2.2.p4+dfsg-2etch1_all.deb
http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.2.p4 +dfsg-2etch1_all.deb -
Debian php4-lasso_0.6.5-3+etch1_arm.deb
http://security.debian.org/pool/updates/main/l/lasso/php4-lasso_0.6.5- 3+etch1_arm.deb -
Debian python-lasso_0.6.5-3+etch1_arm.deb
http://security.debian.org/pool/updates/main/l/lasso/python-lasso_0.6. 5-3+etch1_arm.deb
Debian Linux 4.0 m68k
-
Debian ntp-doc_4.2.2.p4+dfsg-2etch1_all.deb
http://security.debian.org/pool/updates/main/n/ntp/ntp-doc_4.2.2.p4+df sg-2etch1_all.deb -
Debian ntp-refclock_4.2.2.p4+dfsg-2etch1_all.deb
http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.2. p4+dfsg-2etch1_all.deb -
Debian ntp-simple_4.2.2.p4+dfsg-2etch1_all.deb
http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.2.p4 +dfsg-2etch1_all.deb
Ubuntu Ubuntu Linux 8.04 LTS i386
-
Ubuntu bind9-doc_9.4.2.dfsg.P2-2ubuntu0.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.4.2.df sg.P2-2ubuntu0.1_all.deb -
Ubuntu bind9-host_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-host_9.4.2.d fsg.P2-2ubuntu0.1_i386.deb -
Ubuntu bind9_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.4.2.dfsg.P 2-2ubuntu0.1_i386.deb -
Ubuntu dnsutils_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/dnsutils_9.4.2.dfs g.P2-2ubuntu0.1_i386.deb -
Ubuntu libbind-dev_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libbind-dev_9.4.2. dfsg.P2-2ubuntu0.1_i386.deb -
Ubuntu libbind9-30_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libbind9-30_9.4.2. dfsg.P2-2ubuntu0.1_i386.deb -
Ubuntu libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.4_i386.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-4ubuntu3.4_i386.udeb -
Ubuntu libdns35_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libdns35_9.4.2.dfs g.P2-2ubuntu0.1_i386.deb -
Ubuntu libisc35_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisc35_9.4.2.dfs g.P2-2ubuntu0.1_i386.deb -
Ubuntu libisccc30_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisccc30_9.4.2.d fsg.P2-2ubuntu0.1_i386.deb -
Ubuntu libisccfg30_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisccfg30_9.4.2. dfsg.P2-2ubuntu0.1_i386.deb -
Ubuntu liblwres30_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/liblwres30_9.4.2.d fsg.P2-2ubuntu0.1_i386.deb -
Ubuntu libssl-dev_0.9.8g-4ubuntu3.4_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-4ubuntu3.4_i386.deb -
Ubuntu libssl0.9.8-dbg_0.9.8g-4ubuntu3.4_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-4ubuntu3.4_i386.deb -
Ubuntu libssl0.9.8_0.9.8g-4ubuntu3.4_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-4ubuntu3.4_i386.deb -
Ubuntu lwresd_9.4.2.dfsg.P2-2ubuntu0.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/b/bind9/lwresd_9.4.2.d fsg.P2-2ubuntu0.1_i386.deb -
Ubuntu openssl-doc_0.9.8g-4ubuntu3.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-4ubuntu3.4_all.deb -
Ubuntu openssl_0.9.8g-4ubuntu3.4_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4 ubuntu3.4_i386.deb
OpenSSL Project OpenSSL 0.9.3
-
OpenSSL Project openssl-0.9.8j.tar.gz
http://www.openssl.org/source/openssl-0.9.8j.tar.gz
OpenSSL Project OpenSSL 0.9.6 b-36.8
-
OpenSSL Project openssl-0.9.8j.tar.gz
http://www.openssl.org/source/openssl-0.9.8j.tar.gz
OpenSSL Project OpenSSL 0.9.6 i
-
OpenSSL Project openssl-0.9.8j.tar.gz
http://www.openssl.org/source/openssl-0.9.8j.tar.gz
OpenSSL Project OpenSSL 0.9.7 beta1
-
OpenSSL Project openssl-0.9.8j.tar.gz
http://www.openssl.org/source/openssl-0.9.8j.tar.gz
OpenSSL Project OpenSSL 0.9.7 a
-
OpenSSL Project openssl-0.9.8j.tar.gz
http://www.openssl.org/source/openssl-0.9.8j.tar.gz
OpenSSL Project OpenSSL 0.9.7 e
-
OpenSSL Project openssl-0.9.8j.tar.gz
http://www.openssl.org/source/openssl-0.9.8j.tar.gz
OpenSSL Project OpenSSL 0.9.7 g
-
OpenSSL Project openssl-0.9.8j.tar.gz
http://www.openssl.org/source/openssl-0.9.8j.tar.gz
OpenSSL Project OpenSSL 0.9.7 f
-
OpenSSL Project openssl-0.9.8j.tar.gz
http://www.openssl.org/source/openssl-0.9.8j.tar.gz
OpenSSL Project OpenSSL 0.9.8 c
-
OpenSSL Project openssl-0.9.8j.tar.gz
http://www.openssl.org/source/openssl-0.9.8j.tar.gz
Bsdperimeter pfSense 1.2.1
-
BSD Perimeter pfSense-Full-Update-1.2.2.tgz
http://files.pfsense.org/mirror/updates/pfSense-Full-Update-1.2.2.tgz
Apple Mac OS X Server 10.5.2
-
Apple MacOSXServerUpdCombo10.5.7.dmg
http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g
Apple Mac OS X 10.5.6
-
Apple MacOSXUpd10.5.7.dmg
http://support.apple.com/downloads/DL826/MacOSXUpd10.5.7.dmg
cwRsync cwRsync 2.1
-
cwRsync cwRsync 3.0.1
http://sourceforge.net/project/showfiles.php?group_id=69227&package_id =68081&release_id=654656
cwRsync cwRsync 2.1.1
-
cwRsync cwRsync 3.0.1
http://sourceforge.net/project/showfiles.php?group_id=69227&package_id =68081&release_id=654656
HP System Management Homepage 2.1.5
-
HP cp010495.exe
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.j sp?swItem=MTX-8300d57bb5424791b0e61652e8 -
HP hpsmh-3.0.1-73.i386.rpm
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.j sp?swItem=MTX-b35b8e125d17427fa8a74e9ef6 -
HP hpsmh-3.0.1-73.x86_64.rpm
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.j sp?swItem=MTX-d7bcce2dc82d43daaec308eb40
HP System Management Homepage 2.1.9
-
HP cp010495.exe
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.j sp?swItem=MTX-8300d57bb5424791b0e61652e8 -
HP hpsmh-3.0.1-73.i386.rpm
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.j sp?swItem=MTX-b35b8e125d17427fa8a74e9ef6 -
HP hpsmh-3.0.1-73.x86_64.rpm
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.j sp?swItem=MTX-d7bcce2dc82d43daaec308eb40
HP System Management Homepage 2.2.8
-
HP cp010495.exe
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.j sp?swItem=MTX-8300d57bb5424791b0e61652e8 -
HP hpsmh-3.0.1-73.i386.rpm
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.j sp?swItem=MTX-b35b8e125d17427fa8a74e9ef6 -
HP hpsmh-3.0.1-73.x86_64.rpm
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.j sp?swItem=MTX-d7bcce2dc82d43daaec308eb40
VMWare ESX Server 3.0.3
-
VMWare ESX303-200903405-SG.zip
http://download3.vmware.com/software/vi/ESX303-200903405-SG.zip -
VMWare ESX303-200903406-SG.zip
http://download3.vmware.com/software/vi/ESX303-200903406-SG.zip
References
OpenSSL 'EVP_VerifyFinal' Function Signature Verification Vulnerability
References:
References:
- Version 6.1.5 - Release Note (Innominate)
- #2008-016 multiple OpenSSL signature verification API misuse (oCERT)
- 007: SECURITY FIX: January 9, 2009 (OpenBSD)
- eID Homepage (Belgium)
- McAfee Appliance: Response to vulnerability CVE-2009-0021 (McAfee)
- Multiple OpenSSL vulnerabilities in Sun SPARC Enterprise M-series XCP Firmware (Oracle)
- Multiple vulnerabilities in Network Time Protocol (NTP) (Oracle)
- Nortel Response to OpenSSL 'EVP_VerifyFinal' Function Signature Verification Vul (Nortel)
- pfSense 1.2.2 released! (BSD Perimeter)
- Release Name: 3.0.1 (cwRsync)
- Release notice for Ingate Firewall 471 and Ingate SIParator 471 (Ingate)
- tqsllib: Improper checking of the return value of EVP_VerifyFinal() (Kurt Roeckx)
- tqsllib: OpenSSL incorrect checks for malformed signatures (Jan Lieskovsky)
- Version 5.1.6 - Release Notes (Innominate)
- [oCERT-2008-016] Multiple OpenSSL signature verification API misuses ("Will Drewry"
- FreeBSD Security Advisory FreeBSD-SA-09:02.openssl (FreeBSD Security Advisories
- SOL11503: BIND 9 vulnerability CVE-2009-0265 (F5)
- 007: SECURITY FIX: January 9, 2009 (OpenBSD)
- An OpenSource VooDoo cIRCle - security advisory 20090123-01 (VooDoo)
- ASA-2009-057 - ntp security update (RHSA-2009-0046) (Avaya)
- ASA-2009-116 HPSBUX02418 SSRT090002 rev.1 - HP-UX Running OpenSSL, RemoteUnautho (Avaya)
- Avaya advisory ASA-2009-038 (Avaya)
- BIND Security Vulnerability - EVP_VerifyFinal() and DSA_do_verify() return check (ISC)
- HPSBMA02426 SSRT090053 (HP)
- HPSBOV02540 SSRT090249 rev.1 - HP SSL for OpenVMS, Remote Unauthorized Data Inje (HP)
- OpenSSL Security Advisory [07-Jan-2009] (OpenSSL Project)
- RHSA-2009:0046 ntp security update (Red Hat)
- SOL9762: OpenSSL vulnerability - CVE-2008-5077 (F5 Networks)
- Solution 250826: Security Vulnerability in OpenSSL due to Improper Usage of Sign (Sun)