Lucene search
+L

2552 matches found

OSV
OSV
•added 2007/10/13 1:17 a.m.•17 views

CVE-2007-4995

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors...

8.2AI score
SaveExploits0References31
Cvelist
Cvelist
•added 2007/10/13 1:00 a.m.•42 views

CVE-2007-4995

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors...

7.3AI score0.10512EPSS
SaveExploits1References31
CVE
CVE
•added 2007/10/13 1:00 a.m.•951 views

CVE-2007-4995

CVE-2007-4995 describes an off-by-one error in the DTLS implementation of OpenSSL 0.9.8 prior to 0.9.8f that could allow a remote attacker to execute arbitrary code via unspecified vectors. Multiple connected advisories confirm this DTLS flaw and the need to upgrade OpenSSL to a fixed release (0....

9.3CVSS7.3AI score0.10512EPSS
SaveExploits1References31Affected Software1
Debian CVE
Debian CVE
•added 2007/10/13 1:00 a.m.•37 views

CVE-2007-4995

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors...

9.3CVSS9.1AI score0.10512EPSS
SaveExploits1
securityvulns
securityvulns
•added 2007/10/13 12:00 a.m.•52 views

OpenSSL DTLS code execution

No description provided...

9.3CVSS2.2AI score0.10512EPSS
SaveExploits1References1Affected Software1
securityvulns
securityvulns
•added 2007/10/13 12:00 a.m.•76 views

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070326 Thunderbird/2.0.0.0 Mnenhy/0.7.4.0

-----BEGIN PGP SIGNED MESSAGE----- OpenSSL Security Advisory 12-Oct-2007 OpenSSL Vulnerabilities - ----------------------- Vulnerability A - --------------- Andy Polyakov discovered a flaw in OpenSSL's DTLS implementation which could lead to the compromise of clients and servers with DTLS enabled...

9.3CVSS0.4AI score0.16061EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/13 12:00 a.m.•6 views

CVE-2007-4995: Undefined Security Weakness

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors...

9.3CVSS6.5AI score0.10512EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2007/10/12 11:01 a.m.•50 views

Important: Red Hat Security Advisory: openssl security update

Updated OpenSSL packages that correct several security issues are now available for Red Hat Enterprise 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer...

9.3CVSS6.9AI score0.16061EPSS
SaveExploits2References5
Oracle linux
Oracle linux
•added 2007/10/12 12:00 a.m.•53 views

Important: openssl security update

0.9.8b-8.3.2 - more DTLS fixes 321211 0.9.8b-8.3.1 - fix CVE-2007-3108 - side channel attack on private keys 322891 - fix CVE-2007-5135 - off-by-one in SSLgetsharedciphers 309871 - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow 321211...

9.3CVSS3.1AI score0.16061EPSS
SaveExploits2
UbuntuCve
UbuntuCve
•added 2007/10/12 12:00 a.m.•43 views

CVE-2007-4995

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors...

9.3CVSS7.3AI score0.10512EPSS
SaveExploits1References2
OpenSSL
OpenSSL
•added 2007/10/12 12:00 a.m.•51 views

Vulnerability in OpenSSL CVE-2007-4995

A flaw in DTLS support. An attacker could create a malicious client or server that could trigger a heap overflow. This is possibly exploitable to run arbitrary code, but it has not been verified...

9.3CVSS7.6AI score0.10512EPSS
SaveExploits1Affected Software1
Metasploit
Metasploit
•added 2000/04/26 12:00 a.m.•41 views

OpenSSL DTLS ChangeCipherSpec Remote DoS

This module performs a Denial of Service Attack against Datagram TLS in OpenSSL version 0.9.8i and earlier. OpenSSL crashes under these versions when it receives a ChangeCipherspec Datagram before a ClientHello. Module Options msf use auxiliary/dos/ssl/dtls/changecipherspec msf...

5CVSS7AI score0.80134EPSS
SaveExploits9
Rows per page
Query Builder