CVE-2006-3738

CVE-2006-3738 describes a buffer overflow in OpenSSL SSL_get_shared_ciphers across 0.9.7 (up to 0.9.7l) and 0.9.8 (up to 0.9.8f). The description notes unspecified impact with remote attack vectors using a long list of ciphers. A related CVE-2007-5135 (off-by-one) extends the risk to remote code ...