OpenSSL Ciphersuite Downgrade Security Weakness
BID:45164
Info
OpenSSL Ciphersuite Downgrade Security Weakness
| Bugtraq ID: | 45164 |
| Class: | Design Error |
| CVE: |
CVE-2010-4180 CVE-2010-4180 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 02 2010 12:00AM |
| Updated: | Apr 13 2015 09:15PM |
| Credit: | Martin Rex |
| Vulnerable: |
VMWare ESXi 5.0 VMWare ESXi 4.1 VMWare ESXi 4.0 VMWare ESXi 3.5 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESX 3.5 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Teradata 10 SP3 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP4 SuSE SUSE Linux Enterprise Server 10 SP3 SuSE SUSE Linux Enterprise Desktop 11 SP1 SuSE SUSE Linux Enterprise Desktop 10 SP4 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 10 SP4 SuSE SUSE Linux Enterprise 10 SP3 SuSE openSUSE 11.4 SuSE openSUSE 11.3 Sun Solaris 10_x86 Sun Solaris 10_sparc Slackware Linux x86_64 -current Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 rPath rPath Linux 2 rPath rPath Linux 1 rPath Appliance Platform Linux Service 2 rPath Appliance Platform Linux Service 1 RedHat JBoss Enterprise Web Server EL4 0 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux Desktop Workstation 5 client RedHat Enterprise Linux Desktop version 4 Red Hat JBoss Enterprise Web Server for Windows 1.0 Red Hat JBoss Enterprise Web Server for Solaris 1.0 Red Hat JBoss Enterprise Web Server for RHEL 6 1.0 Red Hat JBoss Enterprise Web Server for RHEL 5 Server 1.0 Red Hat JBoss Enterprise Web Server for RHEL 4 ES 1.0 Red Hat JBoss Enterprise Web Server for RHEL 4 AS 1.0 Red Hat JBoss Enterprise Web Server 5.0 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux 5 Server OpenSSL Project OpenSSL 1.0 Beta2 OpenSSL Project OpenSSL 1.0 OpenSSL Project OpenSSL 0.9.8 k OpenSSL Project OpenSSL 0.9.8 j OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 e OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 0.9.7 m OpenSSL Project OpenSSL 0.9.7 l OpenSSL Project OpenSSL 0.9.7 k OpenSSL Project OpenSSL 0.9.7 j OpenSSL Project OpenSSL 0.9.7 i OpenSSL Project OpenSSL 0.9.7 h OpenSSL Project OpenSSL 0.9.7 g OpenSSL Project OpenSSL 0.9.7 f OpenSSL Project OpenSSL 0.9.7 e OpenSSL Project OpenSSL 0.9.7 d OpenSSL Project OpenSSL 0.9.7 c OpenSSL Project OpenSSL 0.9.7 beta3 OpenSSL Project OpenSSL 0.9.7 beta2 OpenSSL Project OpenSSL 0.9.7 beta1 OpenSSL Project OpenSSL 0.9.7 b OpenSSL Project OpenSSL 0.9.7 a OpenSSL Project OpenSSL 0.9.7 OpenSSL Project OpenSSL 0.9.6 m OpenSSL Project OpenSSL 0.9.6 l OpenSSL Project OpenSSL 0.9.6 k OpenSSL Project OpenSSL 0.9.6 j OpenSSL Project OpenSSL 0.9.6 i OpenSSL Project OpenSSL 0.9.6 h OpenSSL Project OpenSSL 0.9.6 g OpenSSL Project OpenSSL 0.9.6 f OpenSSL Project OpenSSL 0.9.6 e OpenSSL Project OpenSSL 0.9.6 d OpenSSL Project OpenSSL 0.9.6 c OpenSSL Project OpenSSL 0.9.6 b-36.8 OpenSSL Project OpenSSL 0.9.6 b OpenSSL Project OpenSSL 0.9.6 a OpenSSL Project OpenSSL 0.9.6 OpenSSL Project OpenSSL 0.9.5 a OpenSSL Project OpenSSL 0.9.5 OpenSSL Project OpenSSL 0.9.4 OpenSSL Project OpenSSL 0.9.3 OpenSSL Project OpenSSL 0.9.2 b OpenSSL Project OpenSSL 0.9.1 c OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0a OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8o OpenSSL Project OpenSSL 0.9.8n OpenSSL Project OpenSSL 0.9.8m OpenSSL Project OpenSSL 0.9.8l OpenSSL Project OpenSSL 0.9.8g OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 f Novell eDirectory 8.8 SP5 Patch 4 Novell eDirectory 8.8 SP5 FTF1 Novell eDirectory 8.8 SP5 Novell eDirectory 8.8 SP4 FTF1 Novell eDirectory 8.8 SP4 Novell eDirectory 8.8 SP3 FTF3 Novell eDirectory 8.8 SP3 Novell eDirectory 8.8 SP2 Novell eDirectory 8.8 SP1 Novell eDirectory 8.8 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 IBM AIX 6.1.5 IBM AIX 6.1.4 IBM AIX 6.1.3 IBM AIX 6.1.2 IBM AIX 6.1.1 IBM AIX 5.3.10 IBM AIX 5.3.9 IBM AIX 5.3.8 IBM AIX 5.3.7 IBM AIX 5.3 L IBM AIX 5.2.2 IBM AIX 5.2 L IBM AIX 5.1 L IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5300-06 IBM AIX 5200-10 IBM AIX 5.3.12 IBM AIX 5.3.11 IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1 HP SSL for OpenVMS 1.4 HP SSL for OpenVMS 1.3 HP Onboard Administrator 3.32 HP Onboard Administrator 3.31 HP Onboard Administrator 3.21 HP Integrated Lights Out 3 2.05 HP Integrated Lights Out 2 1.16 HP Insight Control 6.2 HP Insight Control 6.1 HP Insight Control 6.0 HP HP-UX B.11.31 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.11 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Blue Coat Systems ProxySG 5.2.6 Blue Coat Systems ProxySG 5.2.4 .8 Blue Coat Systems ProxySG 5.2.4 .3 Blue Coat Systems ProxySG 5.2.2 .5 Blue Coat Systems ProxySG 4.3.3 Blue Coat Systems ProxySG 4.2.10 Blue Coat Systems ProxySG 4.2.8 .7 Blue Coat Systems ProxySG 4.2.6 .1 Blue Coat Systems ProxySG 4.2.6 Blue Coat Systems ProxySG 4.2.1 .6 Blue Coat Systems ProxySG 5.2.2.4 Blue Coat Systems ProxyOne 0 Blue Coat Systems ProxyAV 5.2.4 .8 Blue Coat Systems ProxyAV 2.4.2 .3 Blue Coat Systems ProxyAV 2.4.2 Blue Coat Systems ProxyAV 3.2.6.1 Blue Coat Systems ProxyAV 3.2.6.0 Blue Coat Systems ProxyAV 3.2 Blue Coat Systems Policy Center 8.7 Blue Coat Systems Policy Center 8.6 Blue Coat Systems PacketShaper 8.4 Blue Coat Systems PacketShaper 8.3.2 Blue Coat Systems Director 5.2.2 .5 Blue Coat Systems CacheFlow 2.1.4 6 Balabit syslog-ng Premium Edition 4.0.1 Balabit syslog-ng Premium Edition 3.2 Balabit syslog-ng Premium Edition 3.0.7 Balabit syslog-ng Premium Edition 3.0.6 Balabit syslog-ng Premium Edition 3.0.5 Balabit syslog-ng Premium Edition 3.2.1A Avaya Voice Portal 5.1.1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Voice Portal 4.1 SP2 Avaya Voice Portal 4.1 SP1 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Proactive Contact 4.1.2 Avaya Proactive Contact 4.1.1 Avaya Proactive Contact 4.2.2 Avaya Proactive Contact 4.2.1 Avaya Proactive Contact 4.2 Avaya Proactive Contact 4.1 Avaya Proactive Contact 4.0.1 Avaya Proactive Contact 4.0 Avaya Proactive Contact 3.0.4 Avaya Messaging Storage Server 5.2.8 Avaya Messaging Storage Server 5.2.2 Avaya Messaging Storage Server 5.2 SP3 Avaya Messaging Storage Server 5.2 SP2 Avaya Messaging Storage Server 5.2 SP1 Avaya Messaging Storage Server 5.2 Avaya Messaging Storage Server 5.1 SP2 Avaya Messaging Storage Server 5.1 SP1 Avaya Messaging Storage Server 5.1 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Message Networking 5.2.1 Avaya Message Networking 5.2.3 Avaya Message Networking 5.2.2 Avaya Message Networking 5.2 SP1 Avaya Message Networking 5.2 Avaya Message Networking 3.1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 Avaya IQ 5.1 Avaya IQ 5 Avaya IP Office Application Server 6.1 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M Signaling Server 6.0 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000M 6.0 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E Signaling Server 6.0 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya Communication Server 1000E 6.0 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura System Manager 5.2 Avaya Aura SIP Enablement Services 5.2.1 Avaya Aura SIP Enablement Services 5.2 Avaya Aura SIP Enablement Services 5.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 4.0 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 Avaya Aura Communication Manager 5.2 Avaya Aura Communication Manager 5.1 Avaya Aura Communication Manager 4.0 Avaya Aura Communication Manager 4.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 4.2.3 Avaya Aura Application Enablement Services 4.2.2 Avaya Aura Application Enablement Services 4.2.1 Avaya Aura Application Enablement Services 4.0.1 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 5.2.3 Avaya Aura Application Enablement Services 5.2.2 Avaya Aura Application Enablement Services 5.2 Avaya Aura Application Enablement Services 4.2 Avaya Aura Application Enablement Services 4.1 Avaya Aura Application Enablement Services 4.0 Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac Os X Server 10.6.7 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.6 |
| Not Vulnerable: |
Red Hat JBoss Enterprise Web Server for Windows 1.0.2 Red Hat JBoss Enterprise Web Server for Solaris 1.0.2 Red Hat JBoss Enterprise Web Server for RHEL 6 1.0.2 Red Hat JBoss Enterprise Web Server for RHEL 5 Server 1.0.2 Red Hat JBoss Enterprise Web Server for RHEL 4 ES 1.0.2 Red Hat JBoss Enterprise Web Server for RHEL 4 AS 1.0.2 OpenSSL Project OpenSSL 1.0.0c Novell eDirectory 8.8 SP6 Patch 3 HP SSL for OpenVMS 1.4-453 HP Insight Control 6.3 Blue Coat Systems Proxysg 6.1.2 1 Blue Coat Systems Policy Center 8.7.1 Blue Coat Systems PacketShaper 8.7.1 Blue Coat Systems CacheFlow 2.1.4 7 Balabit syslog-ng Premium Edition 4.0.1a Balabit syslog-ng Premium Edition 3.2.1B Balabit syslog-ng Premium Edition 3.0.7a Apple Mac Os X Server 10.6.8 |
Discussion
OpenSSL Ciphersuite Downgrade Security Weakness
OpenSSL is prone to a security weakness that may allow attackers to downgrade the ciphersuite.
Successfully exploiting this issue in conjunction with other latent vulnerabilities may allow attackers to gain access to sensitive information or gain unauthorized access to an affected application that uses OpenSSL.
Releases prior to OpenSSL 1.0.0c are affected.
OpenSSL is prone to a security weakness that may allow attackers to downgrade the ciphersuite.
Successfully exploiting this issue in conjunction with other latent vulnerabilities may allow attackers to gain access to sensitive information or gain unauthorized access to an affected application that uses OpenSSL.
Releases prior to OpenSSL 1.0.0c are affected.
Exploit / POC
OpenSSL Ciphersuite Downgrade Security Weakness
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
OpenSSL Ciphersuite Downgrade Security Weakness
Solution:
Updates are available. Please see the references for more information.
Slackware Linux 12.2
Ubuntu Ubuntu Linux 10.04 powerpc
Apple Mac OS X 10.6.7
Ubuntu Ubuntu Linux 9.10 amd64
Mandriva Linux Mandrake 2009.0 x86_64
MandrakeSoft Enterprise Server 5
Ubuntu Ubuntu Linux 8.04 LTS i386
Apple Mac OS X 10.6.5
Apple Mac OS X Server 10.6.6
MandrakeSoft Corporate Server 4.0 x86_64
Solution:
Updates are available. Please see the references for more information.
Slackware Linux 12.2
-
Slackware openssl-0.9.8q-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ openssl-0.9.8q-i486-1_slack12.2.tgz -
Slackware openssl-solibs-0.9.8q-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ openssl-solibs-0.9.8q-i486-1_slack12.2.tgz
Ubuntu Ubuntu Linux 10.04 powerpc
-
Ubuntu libcrypto0.9.8-udeb_0.9.8k-7ubuntu8.5_powerpc.udeb
http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8k -7ubuntu8.5_powerpc.udeb -
Ubuntu libssl-dev_0.9.8k-7ubuntu8.5_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8k-7ubuntu8 .5_powerpc.deb -
Ubuntu libssl0.9.8-dbg_0.9.8k-7ubuntu8.5_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8k-7ub untu8.5_powerpc.deb -
Ubuntu libssl0.9.8-udeb_0.9.8k-7ubuntu8.5_powerpc.udeb
http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8k-7u buntu8.5_powerpc.udeb -
Ubuntu libssl0.9.8_0.9.8k-7ubuntu8.5_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8k-7ubuntu 8.5_powerpc.deb -
Ubuntu openssl-doc_0.9.8k-7ubuntu8.5_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8k-7ubuntu8.5_all.deb -
Ubuntu openssl_0.9.8k-7ubuntu8.5_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8k-7ubuntu8.5_ powerpc.deb
Apple Mac OS X 10.6.7
-
Apple MacOSXUpd10.6.8.dmg
For Mac OS X v10.6.7
http://www.apple.com/support/downloads/
Ubuntu Ubuntu Linux 9.10 amd64
-
Ubuntu libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.5_amd64.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-16ubuntu3.5_amd64.udeb -
Ubuntu libssl-dev_0.9.8g-16ubuntu3.5_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-16ubuntu3.5_amd64.deb -
Ubuntu libssl0.9.8-dbg_0.9.8g-16ubuntu3.5_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-16ubuntu3.5_amd64.deb -
Ubuntu libssl0.9.8_0.9.8g-16ubuntu3.5_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-16ubuntu3.5_amd64.deb -
Ubuntu openssl-doc_0.9.8g-16ubuntu3.5_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-16ubuntu3.5_all.deb -
Ubuntu openssl_0.9.8g-16ubuntu3.5_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-1 6ubuntu3.5_amd64.deb
Mandriva Linux Mandrake 2009.0 x86_64
-
Mandriva lib64openssl0.9.8-0.9.8h-3.9mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva lib64openssl0.9.8-devel-0.9.8h-3.9mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva lib64openssl0.9.8-static-devel-0.9.8h-3.9mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva openssl-0.9.8h-3.9mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/
MandrakeSoft Enterprise Server 5
-
Mandriva libopenssl0.9.8-0.9.8h-3.9mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva libopenssl0.9.8-devel-0.9.8h-3.9mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva libopenssl0.9.8-static-devel-0.9.8h-3.9mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva openssl-0.9.8h-3.9mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/
Ubuntu Ubuntu Linux 8.04 LTS i386
-
Ubuntu libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.13_i386.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-4ubuntu3.13_i386.udeb -
Ubuntu libssl-dev_0.9.8g-4ubuntu3.13_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-4ubuntu3.13_i386.deb -
Ubuntu libssl0.9.8-dbg_0.9.8g-4ubuntu3.13_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-4ubuntu3.13_i386.deb -
Ubuntu libssl0.9.8_0.9.8g-4ubuntu3.13_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-4ubuntu3.13_i386.deb -
Ubuntu openssl-doc_0.9.8g-4ubuntu3.13_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-4ubuntu3.13_all.deb -
Ubuntu openssl_0.9.8g-4ubuntu3.13_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4 ubuntu3.13_i386.deb
Apple Mac OS X 10.6.5
-
Apple MacOSXUpdCombo10.6.8.dmg
For Mac OS X v10.6 - v10.6.6
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.6
-
Apple MacOSXServerUpdCombo10.6.8.dmg
For Mac OS X Server v10.6 - v10.6.6
http://www.apple.com/support/downloads/
MandrakeSoft Corporate Server 4.0 x86_64
-
Mandriva lib64openssl0.9.7-0.9.7g-2.13.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva lib64openssl0.9.7-devel-0.9.7g-2.13.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva lib64openssl0.9.7-static-devel-0.9.7g-2.13.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva openssl-0.9.7g-2.13.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/
References
OpenSSL Ciphersuite Downgrade Security Weakness
References:
References:
- [syslog-ng-announce] syslog-ng Premium Edition 3.0.7a has been released (BalaBit)
- [syslog-ng-announce] syslog-ng Premium Edition 3.2.1b has been released (BalaBit)
- [syslog-ng-announce] syslog-ng Premium Edition 4.0.1a has been released (Balabit)
- CVE-2010-4180 affects OpenSSL in Solaris 10 (Oracle)
- Fiery Homepage (EFI)
- History of Issues Resolved in eDirectory 8.8.x (Novell)
- HPSBMU02759 SSRT100817 rev.1 - HP Onboard Administrator (OA), Remote Unauthorize (HP)
- Multiple OpenSSL vulnerabilities in Sun SPARC Enterprise M-series XCP Firmware (Oracle)
- OpenSSL Homepage (OpenSSL)
- OpenSSL Security Advisory [2 December 2010] (OpenSSL)
- VMSA-2011-0013 (VMWare)
- HPSBUX02638 SSRT100339 rev.1 - HP-UX Running OpenSSL, Remote Execution of Arbitr ([email protected])
- ASA-2011-003 openssl security update (RHSA-2010-0977) (Avaya)
- ASA-2011-003 openssl security update (RHSA-2010-0977) (avaya)
- ASA-2011-005 openssl security update (RHSA-2010-0978) (Avaya)
- ASA-2011-082 HPSBUX02638 SSRT100339 rev.1 - HP-UX Running OpenSSL, Remote Execut (Avaya)
- Blue Coat Security Advisory (Blue Coat)
- HPSBHF02706 SSRT100613 rev.1 - HP Integrated Lights-Out iLO2 and iLO3 running SS (HP)
- HPSBMA02658 SSRT100413: HP Insight Control for Linux Multiple Vulnerabilities (HP)
- IBM Security Advisory Nov 4, 2011 (IBM)
- openssl security update (RHSA-2010-0977) (Avaya)
- Security Bulletin: IBM Smart Analytics System 7600, 7700, and 7710 are affected (IBM)
- VMSA-2012-0013 (VMWare)
- VU#737740: Fiery 2.0 print controllers use a vulnerable version of OpenSSL (US-CERT)