CVE-2002-0656

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via 1 a large client master key in SSL2 or 2 a large session ID in SSL3...

FreeBSD-SA-02:33.openssl

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:33.openssl Security Advisory The FreeBSD Project Topic: openssl contains multiple vulnerabilities Category: core Module: crypto/openssl Announced: 2002-08-05 Credits: A.L...

OpenSSL < 0.9.6e / 0.9.7b3 Multiple Remote Vulnerabilities

The remote service seems to be using a version of OpenSSL that is older than 0.9.6e or 0.9.7-beta3. Such versions are affected by a buffer overflow that may allow an attacker to execute arbitrary commands on the remote host with the privileges of the application itself. TRUSTED...

Critical: Red Hat Security Advisory: openssl, mm, mod_ssl security update for Stronghold

A new Stronghold 3 release is available which fixes several serious buffer overflow vulnerabilities in OpenSSL, and local privilege escalation vulnerabilities in MM and modssl. OpenSSL is a commercial-grade, full-featured, and Open Source toolkit which implements the Secure Sockets Layer SSL v2/v...

CVE-2002-0656

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via 1 a large client master key in SSL2 or 2 a large session ID in SSL3...

opensslrv.txt

30th Jul 2002 COMANDO OpenSSL multiples vulnerabilidades remotas SISTEMAS AFECTADOS OpenSSL 0.9.6d o anterior OpenSSL 0.9.7-beta2 o anterior PROBLEMA En el OpenSSL Aviso de Seguridad, Ben Laurie expone 5 vulnerabilidades remotas. Pekeño recordatorio: ssl es usado en servidores de html, servidores...

Advisory CA-2002-23 Multiple Vulnerabilities In OpenSSL

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-23 Multiple Vulnerabilities In OpenSSL Original release date: July 30, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected OpenSSL prior to 0.9.6e, up to and including...

GLSA: OpenSSL

-------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------- PACKAGE :openssl SUMMARY :denial of service / remote root exploit DATE :2002-07-30 16:15:00 -...

[SECURITY] [DSA-136-1] Multiple OpenSSL problems

Package : openssl Problem type : multiple remote exploits Debian-specific: no CVE : CAN-2002-0655 CAN-2002-0656 CAN-2002-0657 CAN-2002-0659 The OpenSSL development team has announced that a security audit by A.L. Digital Ltd and The Bunker, under the DARPA CHATS program, has revealed remotely...

Critical: Red Hat Security Advisory: : Updated openssl packages fix remote vulnerabilities

Updated OpenSSL packages are available which fix several serious buffer overflow vulnerabilities. OpenSSL is a commercial-grade, full-featured, and Open Source toolkit which implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength...

DSA-136 openssl - multiple remote exploits

Bulletin has no description...

OpenSSL contains multiple buffer overflows in buffers that are used to hold ASCII representations of integers

Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. There is a buffer overflow on 64-bit platforms related to the ASCII representation of integers. Description OpenSSL clients and servers running on 64-bit platforms prior to version 0.9.6e and pre-release...