PT-2014-1949

Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8zc through 1.0.1j Description The issue is related to the ssl23 get client hello function in s23 srvr.c of the OpenSSL library, which incorrectly handles outdated protocols. This can be exploited by a remote attacker to...

PT-2014-1702

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1j Gentoo Linux affected versions not specified Description The issue allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a clien...