Lucene search
UbuntuUSN-704-1HistoryJan 07, 2009 - 12:00 a.m.
OpenSSL vulnerability
2009-01-0700:00:00
ubuntu.com
27
7.7 High
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.007 Low
EPSS
Percentile
80.7%
Releases
- Ubuntu 8.10
- Ubuntu 8.04
- Ubuntu 7.10
- Ubuntu 6.06
Packages
- openssl -
Details
It was discovered that OpenSSL did not properly perform signature verification
on DSA and ECDSA keys. If user or automated system connected to a malicious
server or a remote attacker were able to perform a machine-in-the-middle attack,
this flaw could be exploited to view sensitive information.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 8.10 | noarch | libssl0.9.8 | <Β 0.9.8g-10.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libcrypto0.9.8-udeb | <Β 0.9.8g-10.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libssl-dev | <Β 0.9.8g-10.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libssl0.9.8 | <Β dbg-0.9.8g-10.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | openssl | <Β 0.9.8g-10.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libssl0.9.8 | <Β 0.9.8g-4ubuntu3.4 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libcrypto0.9.8-udeb | <Β 0.9.8g-4ubuntu3.4 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libssl-dev | <Β 0.9.8g-4ubuntu3.4 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libssl0.9.8-dbg | <Β 0.9.8g-4ubuntu3.4 | UNKNOWN |
| Ubuntu | 8.04 | noarch | openssl | <Β 0.9.8g-4ubuntu3.4 | UNKNOWN |
References
Related
nessus
nessus
openSUSE Security Update : compat-openssl097g (compat-openssl097g-480)
2009-07-21 00:00:00
SuSE9 Security Update : openssl (YOU Patch Number 12341)
2009-09-24 00:00:00
openSUSE Security Update : libopenssl-devel (libopenssl-devel-461)
2009-07-21 00:00:00
openvas
openvas
HP-UX Update for OpenSSL HPSBUX02418
2009-05-05 00:00:00
Ubuntu USN-704-1 (openssl)
2009-01-13 00:00:00
Ubuntu: Security Advisory (USN-704-1)
2009-01-13 00:00:00
centos
centos
openssl, openssl096b, openssl097a security update
2009-01-07 22:28:50
openssl, openssl095a, openssl096 security update
2009-02-02 23:30:18
cve
cve
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.8j-alt1
2009-01-08 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8j-alt1
2009-01-08 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.8j-alt1
2009-01-08 00:00:00
debian
debian
[SECURITY] [DSA 1701-1] New OpenSSL packages fix cryptographic weakness
2009-01-12 20:03:29
fedora
fedora
[SECURITY] Fedora 9 Update: tqsllib-2.0-5.fc9
2009-01-15 03:07:29
[SECURITY] Fedora 10 Update: tqsllib-2.0-5.fc10
2009-01-15 02:55:49
[SECURITY] Fedora 10 Update: openssl-0.9.8g-12.fc10
2009-01-08 04:19:50
debiancve
debiancve
seebug
seebug
OpenSSL 'EVP_VerifyFinal'ε½ζ°ηΎειͺθ―ζΌζ΄
2009-01-08 00:00:00
prion
prion
Input validation
2009-01-07 17:30:00
Input validation
2009-01-07 17:30:00
Input validation
2009-01-07 18:30:00
redhat
redhat
(RHSA-2009:0004) Important: openssl security update
2009-01-07 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:30:43
securityvulns
securityvulns
FreeBSD Security Advisory FreeBSD-SA-09:02.openssl
2009-01-09 00:00:00
[oCERT-2008-016] Multiple OpenSSL signature verification API misuses
2009-01-09 00:00:00
suse
suse
SSL certificate checking bypass in openssl
2009-01-23 16:31:52
oraclelinux
oraclelinux
openssl security update
2009-01-07 00:00:00
osv
osv
openssl openssl097 - cryptographic weakness
2009-01-12 00:00:00
ubuntucve
ubuntucve
gentoo
gentoo
OpenSSL: Certificate validation error
2009-02-12 00:00:00
ntp: Certificate validation error
2009-04-05 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2008-5077
2009-01-07 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:02.openssl
2009-01-07 00:00:00
f5
f5
SOL9889 - NTP vulnerability CVE-2009-0021
2009-04-05 00:00:00
K9889 : NTP vulnerability CVE-2009-0021
2013-03-25 00:00:00
SOL9762 - OpenSSL vulnerability - CVE-2008-5077
2009-03-03 00:00:00
7.7 High
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.007 Low
EPSS
Percentile
80.7%
Related for USN-704-1