ssldump SSLv2 Challenge Buffer Underflow Vulnerability
BID:5693
Info
ssldump SSLv2 Challenge Buffer Underflow Vulnerability
| Bugtraq ID: | 5693 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 11 2002 12:00AM |
| Updated: | Sep 11 2002 12:00AM |
| Credit: | Discovery credited to Eric Rescorla of ssldump. |
| Vulnerable: |
RTFM ssldump 0.9 b2 RTFM ssldump 0.9 b1 |
| Not Vulnerable: |
RTFM ssldump 0.9 b3 |
Discussion
ssldump SSLv2 Challenge Buffer Underflow Vulnerability
The ssldump analysis tool is vulnerable to a buffer underflow when copying an SSLv2 "Challenge" value, potentially resulting in complete compromise of the affected host.
The ssldump analysis tool is vulnerable to a buffer underflow when copying an SSLv2 "Challenge" value, potentially resulting in complete compromise of the affected host.
Exploit / POC
ssldump SSLv2 Challenge Buffer Underflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
ssldump SSLv2 Challenge Buffer Underflow Vulnerability
Solution:
It is recommended that users upgrade to ssldump 0.9b3.
RTFM ssldump 0.9 b1
RTFM ssldump 0.9 b2
Solution:
It is recommended that users upgrade to ssldump 0.9b3.
RTFM ssldump 0.9 b1
-
RTFM ssldump 0.9b3
http://www.rtfm.com/ssldump/ssldump-0.9b3.tar.gz
RTFM ssldump 0.9 b2
-
RTFM ssldump 0.9b3
http://www.rtfm.com/ssldump/ssldump-0.9b3.tar.gz
References
ssldump SSLv2 Challenge Buffer Underflow Vulnerability
References:
References: