OpenSSL ASCII Representation Of Integers Buffer Overflow Vulnerability
BID:5364
Info
OpenSSL ASCII Representation Of Integers Buffer Overflow Vulnerability
| Bugtraq ID: | 5364 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-0655 CVE-2002-0655 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 30 2002 12:00AM |
| Updated: | Mar 19 2015 08:28AM |
| Credit: | Discovery is credited to A.L. Digital Ltd and The Bunker. |
| Vulnerable: |
Sun Crypto Accelerator 1000 Secure Computing SafeWord PremierAccess 3.1 Oracle Oracle9i Application Server 1.0.2 .2 Oracle Oracle9i Application Server 1.0.2 .1s Oracle Oracle9i Application Server 1.0.2 Oracle Oracle9i Application Server Oracle Oracle HTTP Server 9.2 .0 Oracle Oracle HTTP Server 9.0.1 Oracle HTTP Server for Server 9.0.1 Oracle CorporateTime Outlook Connector 3.3 Oracle CorporateTime Outlook Connector 3.1.2 Oracle CorporateTime Outlook Connector 3.1.1 Oracle CorporateTime Outlook Connector 3.1 OpenSSL Project OpenSSL 0.9.7 beta2 OpenSSL Project OpenSSL 0.9.7 beta1 OpenSSL Project OpenSSL 0.9.6 d OpenSSL Project OpenSSL 0.9.6 c OpenSSL Project OpenSSL 0.9.6 b OpenSSL Project OpenSSL 0.9.6 a OpenSSL Project OpenSSL 0.9.6 OpenSSL Project OpenSSL 0.9.5 a OpenSSL Project OpenSSL 0.9.5 OpenSSL Project OpenSSL 0.9.4 OpenSSL Project OpenSSL 0.9.3 OpenSSL Project OpenSSL 0.9.2 b OpenSSL Project OpenSSL 0.9.1 c Novell NetMail 3.10 d Novell NetMail 3.10 c Novell NetMail 3.10 b Novell NetMail 3.10 a Novell NetMail 3.10 Juniper Networks T-series Router T640 Juniper Networks T-series Router T320 Juniper Networks SDX-300 3.1.1 Juniper Networks SDX-300 3.1 Juniper Networks M-series Router M5 Juniper Networks M-series Router M40e Juniper Networks M-series Router M40 Juniper Networks M-series Router M20 Juniper Networks M-series Router M160 Juniper Networks M-series Router M10 Juniper Networks JUNOS 5.6 Juniper Networks JUNOS 5.5 Juniper Networks JUNOS 5.4 Juniper Networks JUNOS 5.3 Juniper Networks JUNOS 5.2 Juniper Networks JUNOS 5.1 Juniper Networks JUNOS 5.0 IBM Linux Affinity Toolkit HP Webproxy 2.0 HP Webproxy 1.0 HP VirtualVault 4.6 HP VirtualVault 4.5 HP Tru64 UNIX INTERNET EXPRESS 5.9 HP Tru64 UNIX Compaq Secure Web Server 5.8.1 HP TCP/IP Services for OpenVMS 5.3 HP Secure OS software for Linux 1.0 HP OpenVMS Secure Web Server 1.2 HP OpenVMS Secure Web Server 1.1 -1 HP OpenSSL for OpenVMS Alpha 1.0 HP INTERNET EXPRESS EAK 2.0 Cosmicperl Directory Pro 10.0.3 Apple Mac OS X Server 10.0 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0 |
| Not Vulnerable: |
OpenSSL Project OpenSSL 0.9.7 beta3 OpenSSL Project OpenSSL 0.9.6 g OpenSSL Project OpenSSL 0.9.6 e Novell NetMail 3.10 e HP Tru64 UNIX Compaq Secure Web Server 5.9.2 HP Tru64 UNIX Compaq Secure Web Server 5.9.1 HP Tru64 UNIX Compaq Secure Web Server 5.8.2 HP OpenSSL for OpenVMS Alpha 1.0 -A |
Discussion
OpenSSL ASCII Representation Of Integers Buffer Overflow Vulnerability
Remotely exploitable buffer overflow conditions have been reported in OpenSSL. This issue is due to insufficient checking of bounds with regards to ASCII representations of integers on 64 bit platforms. It is possible to overflow these buffers on a vulnerable system if overly large values are submitted by a malicious attacker.
Exploitation of this vulnerability may allow execution of arbitrary code with the privileges of the vulnerable application, service or client.
Remotely exploitable buffer overflow conditions have been reported in OpenSSL. This issue is due to insufficient checking of bounds with regards to ASCII representations of integers on 64 bit platforms. It is possible to overflow these buffers on a vulnerable system if overly large values are submitted by a malicious attacker.
Exploitation of this vulnerability may allow execution of arbitrary code with the privileges of the vulnerable application, service or client.
Exploit / POC
OpenSSL ASCII Representation Of Integers Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
OpenSSL ASCII Representation Of Integers Buffer Overflow Vulnerability
References:
References:
- NetMail 3.1e Update for NetWare (Novell)
- Oracle Security Alert #37 (Oracle)
- Security Patch Downloads (Sun Microsystems)
- Security Update 2002-08-02 : Information and Download (Apple)
- Security Update 2002-08-20 : Information and Download (Apple)