Lucene search
SuseSUSE-SA:2004:007HistoryMar 17, 2004 - 1:37 p.m.
remote denial-of-service in openssl
2004-03-1713:37:40
lists.opensuse.org
32
0.015 Low
EPSS
Percentile
85.5%
OpenSSL is an implementation of the Secure Socket Layer (SSL v2/3) and Transport Layer Security (TLS v1) protocol. The NISCC informed us about to failure conditions in openssl that can be triggered to crash applications that use the openssl library. The first bug occurs during SSL/TLS handshake in the function do_change_cipher_spec() due to a NULL pointer assignment. The second bug affects openssl version 0.9.7* only with Kerberos cipher-suite enabled and can be triggered during SSL/TLS handshake too.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 9.0 | i586 | openssl | < 0.9.7b-133 | openssl-0.9.7b-133.i586.rpm |
| openSUSE | 8.0 | i386 | openssl-devel | < 0.9.6c-87 | openssl-devel-0.9.6c-87.i386.rpm |
| openSUSE | 8.2 | i586 | openssl-devel | < 0.9.6i-21 | openssl-devel-0.9.6i-21.i586.rpm |
| openSUSE | 8.1 | i586 | openssl-devel | < 0.9.6g-114 | openssl-devel-0.9.6g-114.i586.rpm |
| openSUSE | 8.1 | i586 | openssl | < 0.9.6g-114 | openssl-0.9.6g-114.i586.rpm |
| openSUSE | 9.0 | i586 | openssl-devel | < 0.9.7b-133 | openssl-devel-0.9.7b-133.i586.rpm |
| openSUSE | 8.0 | i386 | openssl | < 0.9.6c-87 | openssl-0.9.6c-87.i386.rpm |
| openSUSE | 8.2 | i586 | openssl | < 0.9.6i-21 | openssl-0.9.6i-21.i586.rpm |
Related
slackware
slackware
OpenSSL security update
2004-03-17 17:34:04
nessus
nessus
SuSE-SA:2004:007: openssl
2004-07-25 00:00:00
Mandrake Linux Security Advisory : openssl (MDKSA-2004:023)
2004-07-31 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2004-077-01)
2012-09-10 00:00:00
Slackware Advisory SSA:2004-077-01 OpenSSL security update
2012-09-11 00:00:00
Gentoo Security Advisory GLSA 200403-03 (OpenSSL)
2008-09-24 00:00:00
securityvulns
securityvulns
f5
f5
redhat
redhat
(RHSA-2004:120) openssl security update
2004-05-21 00:00:00
(RHSA-2004:074) kdelibs security update
2004-03-10 00:00:00
(RHSA-2004:019) mailman security update
2004-02-09 00:00:00
cert
cert
OpenSSL does not properly handle unknown message types
2004-03-17 00:00:00
OpenSSL contains null-pointer assignment in do_change_cipher_spec() function
2004-03-17 00:00:00
cisco
cisco
Cisco OpenSSL Implementation Vulnerability
2004-03-17 13:00:00
gentoo
gentoo
Multiple OpenSSL Vulnerabilities
2004-03-17 00:00:00
cve
cve
debian
debian
[SECURITY] [DSA 459-1] New kdelibs, kdelibs-crypto packages fix cookie traversal bug
2004-03-10 20:44:55
[SECURITY] [DSA 465-1] New openssl packages fix multiple vulnerabilities
2004-03-17 20:14:05
[SECURITY] [DSA 436-1] New mailman packages fix several vulnerabilities
2004-02-08 22:46:29
freebsd
freebsd
mailman denial-of-service vulnerability in MailCommandHandler
2003-11-18 00:00:00
OpenSSL ChangeCipherSpec denial-of-service vulnerability
2004-03-17 00:00:00
centos
centos
openssl, openssl095a, openssl096 security update
2005-11-03 05:24:10
osv
osv
kdelibs - cookie path traversal
2004-03-10 00:00:00
openssl - several vulnerabilities
2004-03-17 00:00:00
mailman - several vulnerabilities
2004-02-08 00:00:00
debiancve
debiancve
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.6l-alt2
2004-03-17 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.6l-alt2
2004-03-17 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.6l-alt2
2004-03-17 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2004-0112
2004-03-17 00:00:00
Vulnerability in OpenSSL CVE-2004-0079
2004-03-17 00:00:00
ubuntucve
ubuntucve
CVE-2004-0079
2004-11-23 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-04:05.openssl
2004-03-17 00:00:00
redhatcve
redhatcve
CVE-2005-1730
2015-10-30 10:15:31
suse
suse
local privilege escalation in xf86/XFree86
2004-02-23 16:37:48
local privilege escalation in Linux Kernel
2004-02-18 22:19:53
remote code execution in cvs
2004-04-14 15:54:44
oraclelinux
oraclelinux
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2019-03-13 00:00:00
openssl security update
2019-08-16 00:00:00