OpenSSL 'no-ssl3' Build Option Security Bypass Vulnerability

Bugtraq ID:	70585
Class:	Design Error
CVE:	CVE-2014-3568
Remote:	Yes
Local:	No
Published:	Oct 15 2014 12:00AM
Updated:	Sep 09 2016 03:00PM
Credit:	Akamai Technologies
Vulnerable:	VMWare vCenter Server 5.5 VMWare vCenter Server 5.1 VMWare vCenter Server 5.0 VMWare ESXi 5.5 VMWare ESXi 5.1 VMWare ESXi 5.0 SuSE SUSE Studio Onsite 1.3 SuSE SUSE Manager for SLE 11 SP2 1.7 SuSE SLE CLIENT TOOLS for x86_64 10 SuSE SLE CLIENT TOOLS for s390x 10 SuSE SLE CLIENT TOOLS 10 Slackware Slackware Linux 14.1 Slackware Slackware Linux 14.0 Slackware Slackware Linux 13.37 Slackware Slackware Linux 13.1 Slackware Slackware Linux 13.0 OpenSSL Project OpenSSL 1.0.2 OpenSSL Project OpenSSL 1.0.1 beta1 OpenSSL Project OpenSSL 1.0 beta3 OpenSSL Project OpenSSL 1.0 Beta2 OpenSSL Project OpenSSL 1.0 beta1 OpenSSL Project OpenSSL 1.0 OpenSSL Project OpenSSL 0.9.8 k OpenSSL Project OpenSSL 0.9.8 j OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 e OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 1.0.1i OpenSSL Project OpenSSL 1.0.1i OpenSSL Project OpenSSL 1.0.1h OpenSSL Project OpenSSL 1.0.1h OpenSSL Project OpenSSL 1.0.1g OpenSSL Project OpenSSL 1.0.1g OpenSSL Project OpenSSL 1.0.1f OpenSSL Project OpenSSL 1.0.1f OpenSSL Project OpenSSL 1.0.1e OpenSSL Project OpenSSL 1.0.1e OpenSSL Project OpenSSL 1.0.1d OpenSSL Project OpenSSL 1.0.1d OpenSSL Project OpenSSL 1.0.1c OpenSSL Project OpenSSL 1.0.1c OpenSSL Project OpenSSL 1.0.1b OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.1 Beta3 OpenSSL Project OpenSSL 1.0.1 Beta2 OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.0n OpenSSL Project OpenSSL 1.0.0n OpenSSL Project OpenSSL 1.0.0m OpenSSL Project OpenSSL 1.0.0L OpenSSL Project OpenSSL 1.0.0k OpenSSL Project OpenSSL 1.0.0k OpenSSL Project OpenSSL 1.0.0j OpenSSL Project OpenSSL 1.0.0j OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 1.0.0H OpenSSL Project OpenSSL 1.0.0g OpenSSL Project OpenSSL 1.0.0g OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0A OpenSSL Project OpenSSL 1.0.0a OpenSSL Project OpenSSL 1.0.0 Beta5 OpenSSL Project OpenSSL 1.0.0 Beta4 OpenSSL Project OpenSSL 0.9.8zb OpenSSL Project OpenSSL 0.9.8zb OpenSSL Project OpenSSL 0.9.8za OpenSSL Project OpenSSL 0.9.8y OpenSSL Project OpenSSL 0.9.8X OpenSSL Project OpenSSL 0.9.8w OpenSSL Project OpenSSL 0.9.8U OpenSSL Project OpenSSL 0.9.8t OpenSSL Project OpenSSL 0.9.8s OpenSSL Project OpenSSL 0.9.8R OpenSSL Project OpenSSL 0.9.8Q OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8o OpenSSL Project OpenSSL 0.9.8n OpenSSL Project OpenSSL 0.9.8M Beta1 OpenSSL Project OpenSSL 0.9.8m OpenSSL Project OpenSSL 0.9.8l OpenSSL Project OpenSSL 0.9.8g OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 f OpenSSL Project OpenSSL 0.9.8v Juniper EX Series Network Switches for IBM products Pre 12.3R9 IBM z/TPF 1.1.10 IBM Upward Integration Modules (UIM) SCVMM Add-in 1.0.2 IBM Upward Integration Modules (UIM) Integrated Installer 5.5.2 IBM Upward Integration Modules (UIM) Hardware Management Pack 5.5.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.1 IBM Upward Integration Modules (UIM) for VMware vSphere 3.0.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.0.1 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.2 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.1 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.0.2 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.0.1 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5 IBM Tivoli Workload Scheduler for z/OS Connector 8.6 FP02 IBM Tivoli Workload Scheduler for z/OS Connector 8.6 IBM Tivoli Workload Scheduler for z/OS Connector 8.5.1 FP03 IBM Tivoli Workload Scheduler for z/OS Connector 8.5 IBM Tivoli Workload Scheduler for Applications 8.6 IBM Tivoli Workload Scheduler for Applications 8.5 FP01 IBM Tivoli Workload Scheduler for Applications 8.4 FP02 IBM Tivoli Workload Scheduler Distributed 9.2 IBM Tivoli Workload Scheduler Distributed 8.5.1 FP04 IBM Tivoli Workload Scheduler Distributed 8.5.1 IBM Tivoli Workload Scheduler Distributed 9.1.0 FP01 IBM Tivoli Workload Scheduler Distributed 9.1 IBM Tivoli Workload Scheduler Distributed 8.6.0 FP03 IBM Tivoli Workload Scheduler Distributed 8.6 FP02 IBM Tivoli Workload Scheduler Distributed 8.6 IBM Tivoli Workload Scheduler Distributed 8.5.1 FP05 IBM Tivoli Workload Scheduler Distributed 8.5 FP04 IBM Tivoli Workload Scheduler Distributed 8.5 FP03 IBM Tivoli Workload Scheduler Distributed 8.5 IBM Tivoli Workload Scheduler Distributed 8.4 FP07 IBM Tivoli Workload Scheduler Distributed 8.4 IBM Tivoli Netcool/Reporter 2.2 IBM Tivoli Management Framework 4.1.1 IBM Tivoli Dynamic Workload Console 9.2 IBM Tivoli Dynamic Workload Console 9.1 IBM Tivoli Dynamic Workload Console 8.5.1 IBM Tivoli Dynamic Workload Console 8.5 IBM Tivoli Dynamic Workload Console 8.4 IBM Tivoli Dynamic Workload Console 8.6.0.0 IBM Systems Director Storage Control 4.2.6.0 IBM Systems Director Storage Control 4.2.4.1 IBM Systems Director Storage Control 4.2.4.0 IBM Systems Director Storage Control 4.2.3.2 IBM Systems Director Storage Control 4.2.3.1 IBM Systems Director Storage Control 4.2.3.0 IBM Systems Director Storage Control 4.2.2.1 IBM Systems Director Storage Control 4.2.2.0 IBM Systems Director Storage Control 4.2.1.1 IBM Systems Director Storage Control 4.2.1.0 IBM Systems Director Common Agent for Windows 6.3.5 IBM Systems Director Common Agent for Windows 6.3.4 IBM Systems Director Common Agent for Windows 6.3.3 IBM Systems Director Common Agent for Windows 6.3.2 IBM Systems Director Common Agent for Windows 6.3.1 IBM Systems Director Common Agent for Linux 6.3.5 IBM Systems Director Common Agent for Linux 6.3.4 IBM Systems Director Common Agent for Linux 6.3.3 IBM Systems Director Common Agent for Linux 6.3.2 IBM Systems Director Common Agent for Linux 6.3.1 IBM Systems Director 6.3.2 0 IBM Systems Director 6.3.5.0 IBM Systems Director 6.3.3.1 IBM Systems Director 6.3.3.0 IBM Systems Director 6.3.2.2 IBM Systems Director 6.3.2.1 IBM Systems Director 6.3.1.1 IBM Systems Director 6.3.1.0 IBM Systems Director 6.3.0.0 IBM Systems Director 6.2.1.2 IBM Systems Director 6.2.1.0 IBM Storwize V7000 Unified 1.4.3 4 IBM Storwize V7000 Unified 1.4.3 3 IBM Storwize V7000 Unified 1.4.3 2 IBM Storwize V7000 Unified 1.4 1 IBM Storwize V7000 Unified 1.4 0 IBM Storwize V7000 Unified 1.3.2 3 IBM Storwize V7000 Unified 1.3.2 1 IBM Storwize V7000 Unified 1.3.2 0 IBM Storwize V7000 Unified 1.5.2.0 IBM Storwize V7000 Unified 1.5.1.3 IBM Storwize V7000 Unified 1.5.0.2 IBM Storwize V7000 Unified 1.5.0.1 IBM Storwize V7000 Unified 1.5.0.0 IBM Storwize V7000 Unified 1.4.3.6 IBM Storwize V7000 Unified 1.4.3.0 IBM Storwize V7000 Unified 1.4.2.1 IBM Storwize V7000 Unified 1.4.2.0 IBM Storwize V7000 Unified 1.4.1.1 IBM Storwize V7000 Unified 1.4.1.0 IBM Storwize V7000 Unified 1.4 IBM Storwize V7000 Unified 1.3.1.0 IBM Storwize V7000 Unified 1.3.0.5 IBM Storwize V7000 Unified 1.3.0.0 IBM Smart Analytics System 5600 3 IBM Smart Analytics System 5600 2 IBM Smart Analytics System 5600 1 IBM Security Virtual Server Protection for VMware 1.1.1 IBM Security Virtual Server Protection for VMware 1.1.0.1 IBM Security Virtual Server Protection for VMware 1.1 IBM Security Network Intrusion Prevention System GX7800 4.6.2 IBM Security Network Intrusion Prevention System GX7800 4.6.1 IBM Security Network Intrusion Prevention System GX7800 4.6 IBM Security Network Intrusion Prevention System GX7800 4.5 IBM Security Network Intrusion Prevention System GX7800 4.4 IBM Security Network Intrusion Prevention System GX7800 4.3 IBM Security Network Intrusion Prevention System GX7412-10 4.6.2 IBM Security Network Intrusion Prevention System GX7412-10 4.6.1 IBM Security Network Intrusion Prevention System GX7412-10 4.6 IBM Security Network Intrusion Prevention System GX7412-10 4.5 IBM Security Network Intrusion Prevention System GX7412-10 4.4 IBM Security Network Intrusion Prevention System GX7412-10 4.3 IBM Security Network Intrusion Prevention System GX7412-05 4.6.2 IBM Security Network Intrusion Prevention System GX7412-05 4.6.1 IBM Security Network Intrusion Prevention System GX7412-05 4.6 IBM Security Network Intrusion Prevention System GX7412-05 4.5 IBM Security Network Intrusion Prevention System GX7412-05 4.4 IBM Security Network Intrusion Prevention System GX7412-05 4.3 IBM Security Network Intrusion Prevention System GX7412 4.6.2 IBM Security Network Intrusion Prevention System GX7412 4.6.1 IBM Security Network Intrusion Prevention System GX7412 4.6 IBM Security Network Intrusion Prevention System GX7412 4.5 IBM Security Network Intrusion Prevention System GX7412 4.4 IBM Security Network Intrusion Prevention System GX7412 4.3 IBM Security Network Intrusion Prevention System GX6116 4.6.2 IBM Security Network Intrusion Prevention System GX6116 4.6.1 IBM Security Network Intrusion Prevention System GX6116 4.6 IBM Security Network Intrusion Prevention System GX6116 4.5 IBM Security Network Intrusion Prevention System GX6116 4.4 IBM Security Network Intrusion Prevention System GX6116 4.3 IBM Security Network Intrusion Prevention System GX5208-v2 4.6.2 IBM Security Network Intrusion Prevention System GX5208-v2 4.6.1 IBM Security Network Intrusion Prevention System GX5208-v2 4.6 IBM Security Network Intrusion Prevention System GX5208-v2 4.5 IBM Security Network Intrusion Prevention System GX5208-v2 4.4 IBM Security Network Intrusion Prevention System GX5208-v2 4.3 IBM Security Network Intrusion Prevention System GX5208 4.6.2 IBM Security Network Intrusion Prevention System GX5208 4.6.1 IBM Security Network Intrusion Prevention System GX5208 4.6 IBM Security Network Intrusion Prevention System GX5208 4.5 IBM Security Network Intrusion Prevention System GX5208 4.4 IBM Security Network Intrusion Prevention System GX5208 4.3 IBM Security Network Intrusion Prevention System GX5108-v2 4.6.2 IBM Security Network Intrusion Prevention System GX5108-v2 4.6.1 IBM Security Network Intrusion Prevention System GX5108-v2 4.6 IBM Security Network Intrusion Prevention System GX5108-v2 4.5 IBM Security Network Intrusion Prevention System GX5108-v2 4.4 IBM Security Network Intrusion Prevention System GX5108-v2 4.3 IBM Security Network Intrusion Prevention System GX5108 4.6.2 IBM Security Network Intrusion Prevention System GX5108 4.6.1 IBM Security Network Intrusion Prevention System GX5108 4.6 IBM Security Network Intrusion Prevention System GX5108 4.5 IBM Security Network Intrusion Prevention System GX5108 4.4 IBM Security Network Intrusion Prevention System GX5108 4.3 IBM Security Network Intrusion Prevention System GX5008-v2 4.6.2 IBM Security Network Intrusion Prevention System GX5008-v2 4.6.1 IBM Security Network Intrusion Prevention System GX5008-v2 4.6 IBM Security Network Intrusion Prevention System GX5008-v2 4.5 IBM Security Network Intrusion Prevention System GX5008-v2 4.4 IBM Security Network Intrusion Prevention System GX5008-v2 4.3 IBM Security Network Intrusion Prevention System GX5008 4.6.2 IBM Security Network Intrusion Prevention System GX5008 4.6.1 IBM Security Network Intrusion Prevention System GX5008 4.6 IBM Security Network Intrusion Prevention System GX5008 4.5 IBM Security Network Intrusion Prevention System GX5008 4.4 IBM Security Network Intrusion Prevention System GX5008 4.3 IBM Security Network Intrusion Prevention System GX4004-v2 4.6.2 IBM Security Network Intrusion Prevention System GX4004-v2 4.6.1 IBM Security Network Intrusion Prevention System GX4004-v2 4.6 IBM Security Network Intrusion Prevention System GX4004-v2 4.5 IBM Security Network Intrusion Prevention System GX4004-v2 4.4 IBM Security Network Intrusion Prevention System GX4004-v2 4.3 IBM Security Network Intrusion Prevention System GX4004 4.6.2 IBM Security Network Intrusion Prevention System GX4004 4.6.1 IBM Security Network Intrusion Prevention System GX4004 4.6 IBM Security Network Intrusion Prevention System GX4004 4.5 IBM Security Network Intrusion Prevention System GX4004 4.4 IBM Security Network Intrusion Prevention System GX4004 4.3 IBM Security Network Intrusion Prevention System GX4002 4.6.2 IBM Security Network Intrusion Prevention System GX4002 4.6.1 IBM Security Network Intrusion Prevention System GX4002 4.6 IBM Security Network Intrusion Prevention System GX4002 4.5 IBM Security Network Intrusion Prevention System GX4002 4.4 IBM Security Network Intrusion Prevention System GX4002 4.3 IBM Security Network Intrusion Prevention System GX3002 4.6.2 IBM Security Network Intrusion Prevention System GX3002 4.6.1 IBM Security Network Intrusion Prevention System GX3002 4.6 IBM Security Network Intrusion Prevention System GX3002 4.5 IBM Security Network Intrusion Prevention System GX3002 4.4 IBM Security Network Intrusion Prevention System GX3002 4.3 IBM Security Network Intrusion Prevention System GV200 4.6.2 IBM Security Network Intrusion Prevention System GV200 4.6.1 IBM Security Network Intrusion Prevention System GV200 4.6 IBM Security Network Intrusion Prevention System GV200 4.5 IBM Security Network Intrusion Prevention System GV200 4.4 IBM Security Network Intrusion Prevention System GV200 4.3 IBM Security Network Intrusion Prevention System GV1000 4.6.2 IBM Security Network Intrusion Prevention System GV1000 4.6.1 IBM Security Network Intrusion Prevention System GV1000 4.6 IBM Security Network Intrusion Prevention System GV1000 4.5 IBM Security Network Intrusion Prevention System GV1000 4.4 IBM Security Network Intrusion Prevention System GV1000 4.3 IBM SDK for Node.js 1.1.0.7 IBM SDK for Node.js 1.1.0.6 IBM SDK for Node.js 1.1.0.5 IBM SDK for Node.js 1.1.0.3 IBM SDK for Node.js 1.1.0.2 IBM SDK for Node.js 1.1 IBM Rational Software Architect RealTime Edition 9.1.1 IBM Rational Software Architect RealTime Edition 9.1 IBM Rational Software Architect 9.1.1 IBM Rational Software Architect 9.1 IBM Rational Application Developer for WebSphere 9.1.1 IBM Rational Application Developer for WebSphere 9.1.0.1 IBM Rational Application Developer for WebSphere 9.1 IBM QRadar Vulnerability Manager 7.2.3 IBM QRadar SIEM 7.2.3 IBM QRadar SIEM 7.1 MR2 IBM QRadar Risk Manager 7.2.3 IBM QRadar Risk Manager 7.1 MR2 IBM PureApplication System 2.0 IBM PureApplication System 1.1 IBM PureApplication System 1.0 IBM Power HMC 8.8.2.0 IBM Power HMC 8.8.1.0 IBM Power HMC 7.7.9.0 IBM Power HMC 7.7.8.0 IBM Power HMC 7.7.7.0 IBM Power HMC 7.7.3.0 IBM Lotus Protector for Mail Security 2.8 0 IBM Lotus Protector for Mail Security 2.8.1.0 IBM Local Console Manager (LCM8) 1.2.39.0 IBM Local Console Manager (LCM8) 1.2.27.00 IBM Local Console Manager (LCM16) 1.2.39.0 IBM Local Console Manager (LCM16) 1.2.27.00 IBM InfoSphere Information Server 9.1 IBM InfoSphere Information Server 8.7 IBM InfoSphere Information Server 8.5 IBM InfoSphere Information Server 8.1 IBM InfoSphere Information Server 11.3 IBM Image Construction and Composition Tool 2.3.1.0 IBM Image Construction and Composition Tool 2.2.1.3 IBM Global Console Manager (GCM32) 1.4.2.15036 IBM Global Console Manager (GCM32) 1.20.20.23447 IBM Global Console Manager (GCM16) 1.4.2.15036 IBM Global Console Manager (GCM16) 1.20.20.23447 IBM General Parallel File System (GPFS) 3.5.0 IBM Flex System Manager 1.3.2 0 IBM Flex System Manager 1.3.2 IBM Flex System Manager 1.2.1 IBM Flex System Manager 1.2 IBM Flex System Manager 1.1 IBM Flex System Manager 1.3.1.0 IBM Flex System Manager 1.3.1 IBM Flex System Manager 1.3.0.1 IBM Flex System Manager 1.3.0.0 IBM Flex System Manager 1.3.0 IBM Flex System Manager 1.2.1.0 IBM Flex System Manager 1.2.0.0 IBM Flex System Manager 1.1.0.0 IBM Flex System FC3171 8Gb SAN Switch (69Y1930) 9.1.3 IBM Flex System FC3171 8Gb SAN Switch (69Y1930) 9.1.2 IBM Flex System FC3171 8Gb SAN Switch (69Y1930) 9.1.1 IBM Flex System FC3171 8Gb SAN Switch (69Y1930) 9.1 IBM Flex System FC3171 8Gb SAN Pass-thru (69Y1934) 9.1.3 IBM Flex System FC3171 8Gb SAN Pass-thru (69Y1934) 9.1.2 IBM Flex System FC3171 8Gb SAN Pass-thru (69Y1934) 9.1.1 IBM Flex System FC3171 8Gb SAN Pass-thru (69Y1934) 9.1 IBM Cognos TM1 9.5.2 IBM Cognos TM1 10.2.2.0 IBM Cognos TM1 10.2 IBM Cognos TM1 10.1.1 IBM Cognos Planning 10.1.1 IBM Cognos Planning 10.1 IBM Cognos Insight 10.2.2.2 IBM Cognos Insight 10.2.1.2 IBM Cognos Insight 10.2.0.1 IBM Cognos Controller 10.2.1 IBM Cognos Controller 10.1.1 IBM Cognos Controller 8.5.1 IBM Cognos Controller 8.5 IBM Cognos Controller 10.2 IBM Cognos Controller 10.1 IBM BladeCenter(TM)-T 8730 IBM BladeCenter(TM)-T 8720 IBM BladeCenter(TM)-S 8886 IBM BladeCenter(TM)-S 7779 IBM BladeCenter(TM)-S 1948 IBM BladeCenter(TM)-HT 8750 IBM BladeCenter(TM)-HT 8740 IBM BladeCenter(TM)-H 8852 IBM BladeCenter(TM)-H 7989 IBM BladeCenter(TM)-H 1886 IBM BladeCenter(TM)-E 8677 IBM BladeCenter(TM)-E 7967 IBM BladeCenter(TM)-E 1881 IBM BladeCenter T Advanced Management Module 32R0835 IBM BladeCenter Advanced Management Module 3.66K (BPET66K) IBM BladeCenter Advanced Management Module 3.66K (BPEO66K) IBM BladeCenter Advanced Management Module 3.66K (BBET66K) IBM BladeCenter Advanced Management Module 25R5778 HP YB 0 HP YA 0 HP Y 0 HP WX5002/5004 0 HP WB 0 HP W 0 HP VSR1000 0 HP Virtual Connect Enterprise Manager SDK 7.4 HP Version Control Repository Manager 7.4.1 HP Version Control Repository Manager 7.4 HP Version Control Repository Manager 7.3.4 HP Version Control Repository Manager 7.3.1 HP Version Control Repository Manager 7.3 HP Version Control Repository Manager 7.2.2 HP Version Control Repository Manager 7.2.1 HP Version Control Repository Manager 7.2 HP Version Control Repository Manager 7.5.0 HP Version Control Repository Manager 7.3.3 HP Version Control Repository Manager 7.3.2 HP Version Control Agent 7.3.3 HP Version Control Agent 7.3.1 HP Version Control Agent 7.3 HP Version Control Agent 7.2.2 HP Version Control Agent 7.2 HP Version Control Agent 7.3.2 HP VCX 0 HP VB 0 HP VA 0 HP U200S and CS 0 HP U200A and M 0 HP U 0 HP T 0 HP Systems Insight Manager 7.1.1 HP Systems Insight Manager 7.5.0 HP Systems Insight Manager 7.4 HP Systems Insight Manager 7.3.2 HP Systems Insight Manager 7.3.1 HP Systems Insight Manager 7.3 HP Systems Insight Manager 7.2.2 HP Systems Insight Manager 7.2.1 HP Systems Insight Manager 7.2 HP Systems Insight Manager 7.0 HP Systems Insight Manager 6.3 HP Systems Insight Manager 6.2 HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 HP System Management Homepage 7.5.4 HP System Management Homepage 7.5 HP System Management Homepage 7.4.1 HP System Management Homepage 7.3.2 HP System Management Homepage 7.2.3 HP System Management Homepage 7.2.2 HP System Management Homepage 7.2.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1.2 HP System Management Homepage 7.1.1 HP System Management Homepage 7.4 HP System Management Homepage 7.3.3.1 HP System Management Homepage 7.3.1 HP System Management Homepage 7.3 HP System Management Homepage 7.2.4.1 HP System Management Homepage 7.2.1 HP System Management Homepage 7.1 HP System Management Homepage 7.0 HP System Management Homepage 6.3 HP System Management Homepage 6.2 HP System Management Homepage 6.1 HP System Management Homepage 6.0 HP Storage Provisioning Manager 2.4 HP Storage Provisioning Manager 2.3.2 HP Storage Provisioning Manager 2.3 HP Storage Provisioning Manager 2.2.2 HP Storage Provisioning Manager 2.2 HP SSL for OpenVMS 1.4-493 HP SSL for OpenVMS 1.4-476 HP SSL for OpenVMS 1.4-471 HP SSL for OpenVMS 1.4-467 HP SSL for OpenVMS 1.4-453 HP SSL for OpenVMS 1.4 HP Server Migration Pack 7.5 HP SecBlade SSL VPN 0 HP SecBlade III 0 HP SecBlade FW 0 HP RF Manager 0 HP RA 0 HP R 0 HP Q 0 HP PS110 0 HP PB 0 HP PA 0 HP Office Connect PS1810 0 HP Office Connect 1810 PM 0 HP Office Connect 1810 PL 0 HP Office Connect 1810 PK 0 HP Office Connect 1810 P 0 HP N 0 HP MSR9XX 0 HP MSR93X 0 HP MSR50-G2 0 HP MSR50 Russian Version 0 HP MSR50 G2 Russian Version 0 HP MSR50 0 HP MSR4000 0 HP MSR3000 0 HP MSR30-1X Russian Version 0 HP MSR30-1X 0 HP MSR30-16 Russian Version 0 HP MSR30-16 0 HP MSR30 Russian Version 0 HP MSR30 0 HP MSR2000 0 HP MSR20-1X Russian Version 0 HP MSR20-1X 0 HP MSR20 Russian Version 0 HP MSR1000 Russian version 0 HP MSR1000 0 HP Matrix Operating Environment 7.5 HP Matrix Operating Environment 7.4 HP Matrix Operating Environment 7.3.2 HP Matrix Operating Environment 7.3.1 HP Matrix Operating Environment 7.3 HP Matrix Operating Environment 7.2.2 HP Matrix Operating Environment 7.2.1 HP Matrix Operating Environment 7.2 HP M220 0 HP M210 0 HP M.10 0 HP M.08 0 HP L 0 HP KB 0 HP KA 0 HP K 0 HP J 0 HP Insight Control server provisioning 7.4.1 HP Insight Control server provisioning 7.5.0 HP Insight Control server provisioning 7.4.0 HP Insight Control Server Deployment 7.3.1 HP Insight Control Server Deployment 7.2.2 HP Insight Control Server Deployment 7.2.1 HP Insight Control Server Deployment 7.2.0 HP Insight Control Server Deployment 7.1.2 HP Insight Control 7.5 HP Insight Control 7.4 HP Insight Control 7.3 HP Insight Control 7.2 HP i.10 0 HP HSR6800 Russian Version 0 HP HSR6800 0 HP HSR6602 Russian Version 0 HP HSR6602 0 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 HP H.10 0 HP H.07 0 HP F5000-S 0 HP F5000-C 0 HP F5000 0 HP F1000-S 0 HP F1000-E 0 HP F1000-A 0 HP F 0 HP E 0 HP CloudSystem Matrix 7.4 HP CloudSystem Matrix 7.3.2 HP CloudSystem Matrix 7.3.1 HP CloudSystem Matrix 7.3 HP CloudSystem Matrix 7.2.3 HP CloudSystem Matrix 7.2.2 HP CloudSystem Matrix 7.2.1 HP CloudSystem Matrix 7.2 HP A6600 Russian Version 0 HP A6600 0 HP A 0 HP 9500E 0 HP 850/870 0 HP 830 0 HP 7900 0 HP 7500 Switch Series 0 HP 6602 Russian Version 0 HP 6602 0 HP 6600 MCP Russian Version 0 HP 6600 MCP 0 HP 6000 0 HP 5920 Switch Series 0 HP 5900 Switch Series 0 HP 5830 Switch Series 0 HP 5820 Switch Series 0 HP 5800 Switch Series 0 HP 5700 0 HP 5500 SI Switch Series 0 HP 5500 HI Switch Series 0 HP 5500 EI Switch Series 0 HP 5130 EI switch Series 0 HP 5120 SI Switch Series 0 HP 5120 EI Switch Series 0 HP 4800 G Switch Series 0 HP 4510G Switch Series 0 HP 4210G Switch Series 0 HP 3610 Switch Series 0 HP 3600 V2 Switch Series 0 HP 3100V2-48 0 HP 3100V2 0 HP 1920 0 HP 1910 R15XX 0 HP 1910 R11XX 0 HP 1620 0 HP 12900 Switch Series 0 HP 12500(Comware v7) 0 HP 12500 Switch Series 0 HP 12500 0 HP 11900 Switch Series 0 HP 10500 Switch Series (Comware v7) 0 HP 10500 Switch Series (Comware v5) 0 Gentoo Linux FreeBSD FreeBSD 9.3 FreeBSD FreeBSD 9.2 FreeBSD FreeBSD 9.1 FreeBSD FreeBSD 9.0 FreeBSD FreeBSD 8.4 FreeBSD FreeBSD 8.0 FreeBSD FreeBSD 10.1 FreeBSD FreeBSD 10.0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix NetScaler T1 0 Citrix NetScaler Service Delivery Appliance 0 Citrix NetScaler Gateway 0 Citrix NetScaler Application Delivery Controller (ADC) 0 Citrix Command Center Appliance 0 Citrix CloudBridge 0 Avaya CMS r17 Avaya Aura Utility Services 6.3 SP7 Avaya Aura Utility Services 6.3 Avaya Aura Utility Services 6.2 Avaya Aura System Manager 6.3.10 Avaya Aura System Manager 6.3.6 Avaya Aura System Manager 6.3.4 Avaya Aura System Manager 6.3.2 Avaya Aura System Manager 6.3.1 Avaya Aura System Manager 6.3.3 Avaya Aura System Manager 6.3 Avaya Aura System Manager 6.2.4 Avaya Aura System Manager 6.2.3 Avaya Aura System Manager 6.2 SP3 Avaya Aura System Manager 6.2 Avaya Aura Session Manager 6.3.1 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.3.3 Avaya Aura Session Manager 6.3 Avaya Aura Session Manager 6.2.4 Avaya Aura Session Manager 6.2.3 Avaya Aura Session Manager 6.2.2 Avaya Aura Session Manager 6.2 SP1 Avaya Aura Session Manager 6.2 Avaya Aura Presence Services 6.1.2 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.2 Avaya Aura Presence Services 6.1 SP2 Avaya Aura Presence Services 6.1 SP1 Avaya Aura Presence Services 6.1 Avaya Aura Communication Manager 6.3.8 Avaya Aura Communication Manager 6.3 SSP04 Avaya Aura Communication Manager 6.3 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager 6.2 Avaya Aura Collaboration Environment 3.0 Avaya Aura Collaboration Environment 2.0 Avaya Aura Application Enablement Services 6.2 Avaya Aura Application Enablement Services 6.3 Asperasoft Aspera Shares 1.7.5 Asperasoft Aspera Shares 1.7.3 Asperasoft Aspera Shares 1.0.1 Asperasoft Aspera Proxy 0 Asperasoft Aspera Point to Point 0 Asperasoft Aspera Outlook Plugin 0 Asperasoft Aspera Orchestrator 0 Asperasoft Aspera OnDemand for Softlayer 0 Asperasoft Aspera OnDemand for Google Cloud 0 Asperasoft Aspera OnDemand for Azure 0 Asperasoft Aspera OnDemand for Amazon 0 Asperasoft Aspera Mobile 0 Asperasoft Aspera Faspex 3.7.7 Asperasoft Aspera Faspex 3.7.5 Asperasoft Aspera Faspex 3.0.3 Asperasoft Aspera Enterprise Server 0 Asperasoft Aspera Drive 0 Asperasoft Aspera Console 2.3.1 Asperasoft Aspera Console 2.3 Asperasoft Aspera Console 2.0.1 Asperasoft Aspera Connect Server 0 Asperasoft Aspera Client 0 Asperasoft Aspera Cargo 0 Apple Xcode 6.0.1 Apple Xcode 2.4.1 Apple Xcode 6.3 Apple Xcode 6.2 Apple Xcode 6.0 Apple Xcode 5.0 Apple Xcode 4.4 Apple Xcode 4.3.3 Apple Xcode 4.3.2 Apple Xcode 4.3.1 Apple Xcode 4.3 Apple Xcode 4.2.1 Apple Xcode 4.2 Apple Xcode 4.1.1 Apple Xcode 4.0.2 Apple Xcode 4.0.1 Apple Xcode 3.2.5 Apple Xcode 3.2.4 Apple Xcode 3.2.3 Apple Xcode 3.2.2 Apple Xcode 3.2.1 Apple Xcode 3.1.4 Apple Xcode 3.1.3 Apple Xcode 3.1.2 Apple Xcode 3.1.1 Apple Xcode 3.1 Apple Xcode 3.0 Apple Xcode 2.3 Apple Xcode 2.2 Apple Xcode 2.1 Apple Xcode 2.0 Apple Mac Os X 10.10.5 Apple Mac OS X 10.10 Apple Mac OS X 10.9.5 Apple Mac OS X 10.8.5 Apple Mac Os X 10.10.4 Apple Mac OS X 10.10.1
Not Vulnerable:	VMWare Esxi 5.5 ESXi550-20150110 OpenSSL Project OpenSSL 1.0.1j OpenSSL Project OpenSSL 1.0.0o OpenSSL Project OpenSSL 0.9.8zc IBM Upward Integration Modules (UIM) SCVMM Add-in 1.0.3 IBM Upward Integration Modules (UIM) Integrated Installer 5.5.3 IBM Upward Integration Modules (UIM) Hardware Management Pack 5.5.3 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.3 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.3 IBM SDK for Node.js 1.1.0.9 IBM Local Console Manager (LCM8) 1.2.40.00 IBM Local Console Manager (LCM16) 1.2.40.00 IBM Global Console Manager (GCM32) 1.26.1.23978 IBM Global Console Manager (GCM16) 1.26.1.23978 IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru 9.1.5.03.00 IBM BladeCenter Advanced Management Module 3.66N (BPET66N) IBM BladeCenter Advanced Management Module 3.66N (BPEO66N) IBM BladeCenter Advanced Management Module 3.66N (BBET66N) HP VSR1000 R0204P01 HP Virtual Connect Enterprise Manager SDK 7.4.1 HP Version Control Repository Manager 7.5.1 HP U200S and CS F5123P30 HP U200A and M F5123P30 HP Systems Insight Manager 7.5.1 HP System Management Homepage 7.5.5 HP System Management Homepage 7.4.1 HP SSL for OpenVMS 1.4-495 HP Server Migration Pack 7.5.1 HP SecBlade III R3820P03 HP MSR9XX R2513P33 HP MSR50-G2 R2513P33 HP MSR50 Russian Version 2513L40.RU HP MSR50 G2 Russian Version 2513L40.RU HP MSR50 R2513P33 HP MSR4000 R0106P18 HP MSR3000 R0106P18 HP MSR30-1X Russian Version 2513L40.RU HP MSR30-1X R2513P33 HP MSR30-16 Russian Version 2513L40.RU HP MSR30-16 R2513P33 HP MSR30 Russian Version 2513L40.RU HP MSR30 R2513P33 HP MSR2000 R0106P18 HP MSR20-1X Russian Version 2513L40.RU HP MSR20-1X R2513P33 HP MSR20 Russian Version 2513L40.RU HP MSR1000 Russian version R2513L40.RU HP MSR1000 R2513P33 HP MSM 6.5 6.5.1.0 HP MSM 6.4 6.4.2.1 HP MSM 6.3 6.3.1.0 HP MSM 6.2 6.2.1.2 HP Matrix Operating Environment 7.5.1 HP Insight Control server provisioning 7.5.1 HP Insight Control 7.5.1 HP HSR6800 Russian Version R3303P18 HP HSR6800 R3303P18 HP HSR6602 Russian Version R3303P18 HP HSR6602 R3303P18 HP F5000-S R3811P03 HP F5000-C R3811P03 HP F5000 F3210P22 HP F1000-S R3734P06 HP F1000-E R3181P05 HP F1000-A R3734P06 HP A6600 Russian Version R3303P18 HP A6600 R3303P18 HP 9500E R1828P06 HP 7900 R2122 HP 7500 Switch Series R6708P10 HP 6602 Russian Version R3303P18 HP 6602 R3303P18 HP 6600 MCP Russian Version R3303P18 HP 6600 MCP R3303P18 HP 6000 R2507P34 HP 5920 Switch Series R2311P05 HP 5900 Switch Series R2311P05 HP 5830 Switch Series R1118P11 HP 5820 Switch Series R1809P03 HP 5800 Switch Series R1809P03 HP 5700 R2311P05 HP 5500 SI Switch Series R2221P08 HP 5500 HI Switch Series R5501P06 HP 5500 EI Switch Series R2221P08 HP 5130 EI switch Series R3108P03 HP 5120 SI Switch Series R1513P95 HP 5120 EI Switch Series R2221P08 HP 4800 G Switch Series R2221P08 HP 4510G Switch Series R2221P08 HP 4210G Switch Series R2221P08 HP 3610 Switch Series R5319P10 HP 3600 V2 Switch Series R2110P03 HP 3100V2-48 R2110P03 HP 3100V2 R5203P11 HP 1920 R1105 HP 1910 R15XX R1513P95 HP 1910 R11XX R1107 HP 1620 R1104 HP 12900 Switch Series R1005P15 HP 12500(Comware v7) R7328P04 HP 12500 R1828P06 HP 11900 Switch Series R2111P06 HP 10500 Switch Series (Comware v5) R1208P10 Asperasoft Aspera Shares 1.9 Asperasoft Aspera Proxy 1.2.3 Asperasoft Aspera Orchestrator 2.10 Asperasoft Aspera Faspex 3.9 Asperasoft Aspera Console 2.5.3 Asperasoft Aspera 3.5.2 Apple Xcode 7.0 Apple Mac OS X 10.10.2

OpenSSL 'no-ssl3' Build Option Security Bypass Vulnerability

OpenSSL is prone to a security-bypass vulnerability.

Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions.

OpenSSL 'no-ssl3' Build Option Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenSSL 'no-ssl3' Build Option Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenSSL 'no-ssl3' Build Option Security Bypass Vulnerability

References:

• OpenSSL Project (OpenSSL Project)
  
• Vulnerabilities in OpenSSL affect IBM QRadar SIEM (CVE-2014-3567, CVE-2014-3568, (IBM)
  
• HPSBMU03263 rev.1 - HP Insight Control running OpenSSL, Remote Disclosure of In (HP)
  
• [security bulletin] HPSBMU03260 rev.1 - HP System Management Homepage running Op (Seclist.org)
  
• CTX216642 Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Li (Citrix)
  
• FreeBSD-SA-14:23.openssl: OpenSSL multiple vulnerabilities (FreeBSD)
  
• HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access, Man- (HP)
  
• HPSBHF03300 rev.1 - HP Network Products running OpenSSL, Remote Denial of Servic (HP)
  
• HPSBMU03304 rev.1 - HP Insight Control server deployment on Linux and Windows, R (HP)
  
• HPSBMU03611 rev.1 - HPE Matrix Operating Environment on Windows and Linux, Multi (HP)
  
• HPSBMU03612 rev.1 - HPE Insight Control on Windows and Linux, Multiple Remote Vu (HP)
  
• HPSBOV03227 rev.2 - HP SSL for OpenVMS, ID, DoS and Other Vulnerabilities (HP)
  
• HPSBOV03227 rev.2 - HP SSL for OpenVMS, Remote ID, DoS and Other Vulnerabilities (HP)
  
• Multiple vulnerabilities affecting the Cordova platform and IBM SDK Node.js pack (IBM)
  
• OpenSSL Security Advisory [15 Oct 2014] (OpenSSL )
  
• Security advisory: CVE-2014-3513 CVE-2014-3566 (POODLE) CVE-2014-3567 CVE-2014-3 (Asperasoft)
  
• Security Bulletin: DTLS Secure Real-time Transport Protocol (SRTP) vulnerabiliti (IBM)
  
• Security Bulletin: IBM Cognos Controller is affected by multiple vulnerabilities (IBM)
  
• Security Bulletin: IBM Smart Analytics System 5600 is affected by multiple vulne (IBM)
  
• Security Bulletin: Multiple OpenSSL vulnerabilities affect IBM Tivoli Netcool/Re (IBM)
  
• Security Bulletin: Multiple Vulnerabilities in Current Release of IBM® SDK for N (IBM)
  
• Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Cognos Insight (IBM)
  
• Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Cognos TM1 (CV (IBM)
  
• Security Bulletin: Rational Application Developer for WebSphere Software in Cord (IBM)
  
• Security Bulletin: SSLv3 Vulnerability and multiple vulnerabilities in OpenSSL a (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect Flex System FC3171 8Gb SAN (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect GPFS V3.5 for Windows (CVE- (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM BladeCenter Advanced Ma (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos Planning (CVE-20 (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM Global Console Manager (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Information (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Network Intrus (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect Upward Integration Modules (IBM)
  
• Security Bulletin: Vulnerabilities in SSLv3 affect IBM Flex System Manager (FSM) (IBM)
  
• Security Bulletin: Vulnerabilities in SSLv3 affect IBM Flex System Manager (FSM) (IBM)
  
• Security Bulletin: Vulnerabilities in SSLv3 and OpenSSL affects Virtual Server P (IBM)
  
• Security Bulletin: Vulnerability in SSLv3 Affects Power Hardware Management Cons (IBM)
  
• Security Bulletin: Vulnerability in SSLv3 affects Tivoli Workload Scheduler (CVE (IBM)
  
• Security Bulletin: Vulnerability in SSLv3 affects Tivoli Workload Scheduler For (IBM)
  
• Security Bulletin: z/TPF is affected by the POODLE and OpenSSL vulnerabilities ( (IBM)
  
• Security Bulletin:Tivoli Management Framework OpenSSL vulnerabilities (IBM)
  
• VMware Security Advisory VMSA-2015-0001 (SecLists.Org)
  
• VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address sec (Avaya)
  
• Vulnerabilities in OpenSSL affect IBM Image Construction and Composition Tool (C (IBM)
  
• Vulnerabilities in OpenSSL affect IBM PureApplication System (CVE-2014-3513, CVE (IBM)
  
• Vulnerabilities in OpenSSL may cause weak cyphers to be used over SSLv3 (POODLE (IBM)
  
• Vulnerabilties in OpenSSL affect IBM Storwize V7000 Unified (CVE-2014-3513, CVE- (IBM)