A flaw in the SSLv2 client code was discovered. When a client application used OpenSSL to create an SSLv2 connection to a malicious server, that server could cause the client to crash.

exploitpack 2

cvelist 1

ubuntucve 1

securityvulns 4

nvd 1

packetstorm 1

debiancve 1

seebug 4

cve 1

exploitdb 2

nessus 40

openvas 66

debian 3

osv 2

freebsd_advisory 1

altlinux 3

f5 4

gentoo 2

suse 1

redhat 4

centos 2

slackware 1

ubuntu 1

freebsd 1

oraclelinux 5

vmware 2

cert 2

exploitpack

OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service

2006-09-28 00:00:00

OpenSSL 0.9.7l0.9.8d - SSLv2 Client Crash

2007-12-23 00:00:00

cvelist

CVE-2006-4343

2006-09-28 18:00:00

ubuntucve

CVE-2006-4343

2006-09-28 00:00:00

securityvulns

[EXPL] OpenSSL SSLv2 Client Crash (NULL Reference)

2007-12-20 00:00:00

Multiple OpenSSL security vulnerabilities

2007-09-28 00:00:00

[OpenPKG-SA-2006.021] OpenPKG Security Advisory (openssl)

2006-09-29 00:00:00

nvd

CVE-2006-4343

2006-09-28 18:07:00

packetstorm

openssl-dos.txt

2007-12-24 00:00:00

debiancve

CVE-2006-4343

2006-09-28 18:07:00

seebug

OpenSSL < 0.9.7l / 0.9.8d - SSLv2 Client Crash Exploit

2014-07-01 00:00:00

OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service Vulnerability

2014-07-01 00:00:00

OpenSSL < 0.9.7l / 0.9.8d SSLv2 Client Crash Exploit

2007-12-24 00:00:00

cve

CVE-2006-4343

2006-09-28 18:07:00

exploitdb

OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service

2006-09-28 00:00:00

OpenSSL < 0.9.7l/0.9.8d - SSLv2 Client Crash

2007-12-23 00:00:00

nessus

Debian DSA-1195-1 : openssl096 - denial of service (multiple)

2006-10-20 00:00:00

RHEL 2.1 / 3 / 4 : openssl (RHSA-2006:0695)

2006-09-29 00:00:00

FreeBSD : OpenSSL -- Multiple problems in crypto(3) (0f37d765-c5d4-11db-9f82-000e0c2e438a)

2007-02-27 00:00:00

openvas

Debian: Security Advisory (DSA-1195-1)

2008-01-17 00:00:00

Debian Security Advisory DSA 1195-1 (openssl096)

2008-01-17 00:00:00

Gentoo Security Advisory GLSA 200610-11 (openssl)

2008-09-24 00:00:00

debian

[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service

2006-10-10 20:35:20

[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service

2006-10-10 20:35:20

[SECURITY] [DSA 1185-1] New openssl packages fix denial of service

2006-09-28 17:28:09

osv

openssl096

2006-10-10 00:00:00

openssl

2006-09-28 00:00:00

freebsd_advisory

FreeBSD-SA-06:23.openssl

2006-09-28 00:00:00

altlinux

Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt5

2006-09-27 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt5

2006-09-27 00:00:00

Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt5

2006-09-27 00:00:00

SOL6734 - Local OpenSSL vulnerabilities VU#547300 and VU#386964, CAN-2006-3738, CAN-2006-2940, CAN-2006-2937, CAN-2006-4343

2007-05-16 00:00:00

K6734 : Local OpenSSL vulnerabilities VU#547300 and VU#386964, CAN-2006-3738, CAN-2006-2940, CAN-2006-2937, CAN-2006-4343

2013-03-27 00:00:00

SOL8106 - OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135

2007-11-15 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2006-10-24 00:00:00

AMD64 x86 emulation base libraries: OpenSSL multiple vulnerabilities

2006-12-11 00:00:00

suse

remote denial of service in openssl

2006-09-28 16:40:53

redhat

(RHSA-2006:0695) openssl security update

2006-09-28 00:00:00

(RHSA-2008:0629) Moderate: Red Hat Network Satellite Server Solaris client security update

2008-08-13 00:00:00

(RHSA-2008:0264) Moderate: Red Hat Network Satellite Server Solaris client security update

2008-05-20 00:00:00

centos

openssl, openssl095a, openssl096 security update

2006-10-02 01:43:05

openssl, openssl096b security update

2006-09-29 03:35:21

slackware

[slackware-security] openssl

2006-09-29 07:57:13

ubuntu

openssl vulnerabilities

2006-09-29 00:00:00

freebsd

OpenSSL -- Multiple problems in crypto(3)

2006-09-28 00:00:00

oraclelinux

Important openssl security update

2006-11-30 00:00:00

Important openssl security update

2006-11-30 00:00:00

openssl-fips security update

2015-04-02 00:00:00

vmware

Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

2008-03-17 00:00:00

Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

2008-03-17 00:00:00

cert

OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow

2006-09-28 00:00:00

OpenSSL SSLv2 client code fails to properly check for NULL

2006-09-28 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

9.2 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

JSON

Related for OPENSSL:CVE-2006-4343