CVE-2009-1386

ssl/s3pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a DTLS ChangeCipherSpec packet that occurs before ClientHello...

CVE-2009-1386

CVE-2009-1386 affects OpenSSL’s DTLS implementation: ssl/s3_pkt.c in OpenSSL versions before 0.9.8i allows a remote attacker to cause a denial of service via a ChangeCipherSpec datagram sent before ClientHello, causing a NULL pointer dereference and daemon crash. Public details place the vulnerab...

CVE-2007-2813: Undefined Security Weakness

Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed 1 ClientHello, 2 ChangeCipherSpec, or 3 Finished message during an SSL session...