Important openssl security update

0.9.7a-43.14 - fix CVE-2006-2937 - mishandled error on ASN.1 parsing 207276 - fix CVE-2006-2940 - parasitic public keys DoS 207274 - fix CVE-2006-3738 - buffer overflow in SSLgetsharedciphers 206940 - fix CVE-2006-4343 - sslv2 client DoS 206940 0.9.7a-43.11 - fix CVE-2006-4339 - prevent attack on...

CVE-2006-5654

Unspecified vulnerability in the Network Security Services NSS in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service application crash via unspecified vectors. NOTE: due to...

CVE-2006-5654

CVE-2006-5654 concerns the NSS component used by Sun Java System Web Server 6.0 (pre-SP10) and ONE Application Server 7 (pre-Update 3) when SSLv2 is enabled, allowing remote authenticated users to cause a denial of service. Connected documents indicate related NSS issues (e.g., CVE-2006-5201) and...

GLSA-200610-11 : OpenSSL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200610-11 OpenSSL: Multiple vulnerabilities Tavis Ormandy and Will Drewry, both of the Google Security Team, discovered that the SSLgetsharedciphers function contains a buffer overflow vulnerability, and that the SSLv2 client code...

Debian DSA-1195-1 : openssl096 - denial of service (multiple)

Multiple vulnerabilities have been discovered in the OpenSSL cryptographic software package that could allow an attacker to launch a denial of service attack by exhausting system resources or crashing processes on a victim's computer. - CVE-2006-3738 Tavis Ormandy and Will Drewry of the Google...

Debian DSA-1185-2 : openssl - denial of service

The fix used to correct CVE-2006-2940 introduced code that could lead to the use of uninitialized memory. Such use is likely to cause the application using the openssl library to crash, and has the potential to allow an attacker to cause the execution of arbitrary code. For reference please find...

[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1195-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 10, 2006 - ------------------------------------------------------------------------ Package : openssl096...

[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1195-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 10, 2006 - ------------------------------------------------------------------------ Package : openssl096...

DSA-1195-1 openssl096

Bulletin has no description...

CentOS 3 / 4 : openssl (CESA-2006:0695)

Updated OpenSSL packages are now available to correct several security issues. This update has been rated as having important security impact by the Red Hat Security Response Team. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate...

openssl, openssl096b security update

CentOS Errata and Security Advisory CESA-2006:0695 Updated OpenSSL packages are now available to correct several security issues. This update has been rated as having important security impact by the Red Hat Security Response Team. The OpenSSL toolkit provides support for secure communications...

RHEL 2.1 / 3 / 4 : openssl (RHSA-2006:0695)

Updated OpenSSL packages are now available to correct several security issues. This update has been rated as having important security impact by the Red Hat Security Response Team. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate...

[OpenPKG-SA-2006.021] OpenPKG Security Advisory (openssl)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security/ http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2006.021 28-Sep-2006 Package: openssl Vulnerability: denial of service OpenPKG Specific: ...

CVE-2006-4343

The getserverhello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service client crash via unknown vectors that trigger a null pointer dereference...

CVE-2006-4343

The getserverhello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service client crash via unknown vectors that trigger a null pointer dereference...

CVE-2006-4343

The getserverhello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service client crash via unknown vectors that trigger a null pointer dereference...

CVE-2006-4343

CVE-2006-4343 affects OpenSSL SSLv2 client code: a null pointer dereference in get_server_hello can crash the client when connecting to a malicious server. Affected are OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d (and earlier). Public exploit code exists (OpenSSL SSLv2 Client Crash). Reme...

CVE-2006-4343

The getserverhello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service client crash via unknown vectors that trigger a null pointer dereference...

CVE-2006-4343

The getserverhello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service client crash via unknown vectors that trigger a null pointer dereference...

OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service

OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service source: https://www.securityfocus.com/bid/20246/info OpenSSL is prone to a denial-of-service vulnerability. A malicious server could cause a vulnerable client application to crash, effectively denying service. !/usr/bin/perl...