PT-2014-1949

Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8zc through 1.0.1j Description The issue is related to the ssl23 get client hello function in s23 srvr.c of the OpenSSL library, which incorrectly handles outdated protocols. This can be exploited by a remote attacker to...

PT-2014-1692

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8zc OpenSSL versions prior to 1.0.0o OpenSSL versions prior to 1.0.1j Description The issue allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to files s23 clnt.c and...

PT-2014-1702

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1j Gentoo Linux affected versions not specified Description The issue allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a clien...