It was discovered that OpenSSL did not correctly perform Montgomery
multiplications. Local attackers might be able to reconstruct RSA
private keys by examining another user’s OpenSSL processes. (CVE-2007-3108)
Moritz Jodeit discovered that OpenSSL’s SSL_get_shared_ciphers function
did not correctly check the size of the buffer it was writing to.
A remote attacker could exploit this to write one NULL byte past the end of
an application’s cipher list buffer, possibly leading to arbitrary code
execution or a denial of service. (CVE-2007-5135)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 7.04 | noarch | libssl0.9.8 | < 0.9.8c-4ubuntu0.1 | UNKNOWN |
Ubuntu | 7.04 | noarch | libcrypto0.9.8-udeb | < 0.9.8c-4ubuntu0.1 | UNKNOWN |
Ubuntu | 7.04 | noarch | libssl-dev | < 0.9.8c-4ubuntu0.1 | UNKNOWN |
Ubuntu | 7.04 | noarch | libssl0.9.8-dbg | < 0.9.8c-4ubuntu0.1 | UNKNOWN |
Ubuntu | 7.04 | noarch | openssl | < 0.9.8c-4ubuntu0.1 | UNKNOWN |
Ubuntu | 6.10 | noarch | libssl0.9.8 | < 0.9.8b-2ubuntu2.1 | UNKNOWN |
Ubuntu | 6.10 | noarch | libcrypto0.9.8-udeb | < 0.9.8b-2ubuntu2.1 | UNKNOWN |
Ubuntu | 6.10 | noarch | libssl-dev | < 0.9.8b-2ubuntu2.1 | UNKNOWN |
Ubuntu | 6.10 | noarch | libssl0.9.8-dbg | < 0.9.8b-2ubuntu2.1 | UNKNOWN |
Ubuntu | 6.10 | noarch | openssl | < 0.9.8b-2ubuntu2.1 | UNKNOWN |