openssl sslv2 client code

🗓️ 13 Aug 2008 14:16:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 5 Views

OpenSSL SSL version two client get_server_hello may crash due to null pointer dereference in older releases.

Reporter	Title	Published	Views	Family All 192
0day.today	OpenSSL < 0.9.7l / 0.9.8d SSLv2 Client Crash Exploit	23 Dec 200700:00	–	zdt
ALT Linux	Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt5	27 Sep 200600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt5	27 Sep 200600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt5	27 Sep 200600:00	–	altlinux
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 3 / 4 : openssl (CESA-2006:0695)	2 Oct 200600:00	–	nessus
Tenable Nessus	Debian DSA-1185-2 : openssl - denial of service	14 Oct 200600:00	–	nessus
Tenable Nessus	Debian DSA-1195-1 : openssl096 - denial of service (multiple)	20 Oct 200600:00	–	nessus
Tenable Nessus	Debian DSA-1379-1 : openssl - off-by-one error/buffer overflow	3 Oct 200700:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : Local OpenSSL vulnerabilities (SOL6734)	10 Oct 201400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	any	noarch	rhn-solaris-bootstrap	5.1.1-3	rhn-solaris-bootstrap-5.1.1-3.noarch.rpm
Red Hat Enterprise Linux	any	noarch	rhn_solaris_bootstrap_5_1_1_3	1-0	rhn_solaris_bootstrap_5_1_1_3-1-0.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2006-4343
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2006-4343
cve	www.cve.org/CVERecord

13 Jan 2026 22:31Current

7High risk

Vulners AI Score7

CVSS 24.3

EPSS0.17418

openssl ssl version two null pointer dereference denial of service get server hello