Lucene search
+L

429 matches found

Prion
Prion
•added 2009/11/13 4:30 p.m.•38 views

Authentication flaw

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...

5.8CVSS9AI score0.87264EPSS
SaveExploits16References6Affected Software3
UbuntuCve
UbuntuCve
•added 2008/05/29 4:32 p.m.•45 views

CVE-2008-0891

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service crash via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information...

4.3CVSS6.9AI score0.0423EPSS
SaveExploits1References3
Prion
Prion
•added 2008/05/29 4:32 p.m.•27 views

Double free

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service crash via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information...

4.3CVSS6.5AI score0.0423EPSS
SaveExploits1References22Affected Software1
NVD
NVD
•added 2008/05/29 4:32 p.m.•32 views

CVE-2008-0891

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service crash via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information...

4.3CVSS6.3AI score0.0423EPSS
SaveExploits1References22
Cvelist
Cvelist
•added 2008/05/29 4:00 p.m.•35 views

CVE-2008-0891

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service crash via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information...

7.2AI score0.0423EPSS
SaveExploits1References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/05/29 12:00 a.m.•6 views

CVE-2008-0891: Undefined Security Weakness

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service crash via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information...

4.3CVSS6AI score0.0423EPSS
SaveExploits1References2
ALT Linux
ALT Linux
•added 2007/08/07 12:00 a.m.•66 views

Security fix for the ALT Linux 9 package openssl10 version 0.9.8d-alt3

Aug. 7, 2007 Dmitry V. Levin 0.9.8d-alt3 - Fixed side-channel attack on private keys CVE-2007-3108, RH245732, http://cvs.openssl.org/chngview?cn=16275. - Mitigated branch prediction attacks RH250573, http://cvs.openssl.org/chngview?cn=16077. - Changed SSL/TLS server implementation to be stricter...

1.2CVSS7AI score0.00404EPSS
SaveExploits1
ALT Linux
ALT Linux
•added 2007/08/07 12:00 a.m.•127 views

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8d-alt3

Aug. 7, 2007 Dmitry V. Levin 0.9.8d-alt3 - Fixed side-channel attack on private keys CVE-2007-3108, RH245732, http://cvs.openssl.org/chngview?cn=16275. - Mitigated branch prediction attacks RH250573, http://cvs.openssl.org/chngview?cn=16077. - Changed SSL/TLS server implementation to be stricter...

1.2CVSS7AI score0.00404EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2004/07/31 12:00 a.m.•38 views

Mandrake Linux Security Advisory : openssl (MDKSA-2003:035)

Researchers discovered a timing-based attack on RSA keys that OpenSSL is generally vulnerable to, unless RSA blinding is enabled. Patches from the OpenSSL team have been applied to turn RSA blinding on by default. An extension of the 'Bleichenbacher attack' on RSA with PKS 1 v1.5 padding as used ...

7.5CVSS8.1AI score0.06393EPSS
SaveExploits0References6
Rows per page
Query Builder