ssldump PreMasterSecret Buffer Overflow Vulnerability
BID:5690
Info
ssldump PreMasterSecret Buffer Overflow Vulnerability
| Bugtraq ID: | 5690 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 11 2002 12:00AM |
| Updated: | Sep 11 2002 12:00AM |
| Credit: | Discovery credited to Eric Rescorla of ssldump. |
| Vulnerable: |
RTFM ssldump 0.9 b2 RTFM ssldump 0.9 b1 |
| Not Vulnerable: |
RTFM ssldump 0.9 b3 |
Discussion
ssldump PreMasterSecret Buffer Overflow Vulnerability
The ssldump analysis tool is vulnerable to a buffer overflow located in the PreMasterSecret decryption process, potentially resulting in complete compromise of the affected host.
The ssldump analysis tool is vulnerable to a buffer overflow located in the PreMasterSecret decryption process, potentially resulting in complete compromise of the affected host.
Exploit / POC
ssldump PreMasterSecret Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
ssldump PreMasterSecret Buffer Overflow Vulnerability
Solution:
It is recommended that users upgrade to ssldump 0.9b3.
RTFM ssldump 0.9 b1
RTFM ssldump 0.9 b2
Solution:
It is recommended that users upgrade to ssldump 0.9b3.
RTFM ssldump 0.9 b1
-
RTFM ssldump 0.9b3
http://www.rtfm.com/ssldump/ssldump-0.9b3.tar.gz
RTFM ssldump 0.9 b2
-
RTFM ssldump 0.9b3
http://www.rtfm.com/ssldump/ssldump-0.9b3.tar.gz
References
ssldump PreMasterSecret Buffer Overflow Vulnerability
References:
References: