• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

OpenSSL SSLv2 Null Pointer Dereference Client Denial of Service Vulnerability

References:

• ASA-2006-260 - HP-UX OpenSSL Denial of Service (DoS), Increase Privilege (HPSBUX (Avaya)
  
• Cisco Security Response: Multiple Vulnerabilities in OpenSSL library (Cisco)
  
• Critical Patch Update - January 2007 (Oracle)
  
• cwRsync 2.0.10 released (cwRsync)
  
• HPSBUX02174 SSRT061239 rev.1 HP-UX Running OpenSSL Denial of Service (DoS), Incr (HP)
  
• IPCop 1.4.13 released (IPCop)
  
• Kolab Security Issue 11 20061002 (Kolab)
  
• Release notice for Ingate Firewall 4.5.2 and Ingate SIParator 4.5.2 (Ingate)
  
• SnapGear Firmware Release Notes (Secure Computing)
  
• Sun Alert ID: 102711 (Sun)
  
• VMware Workstation 6.0 Release Notes (VMware)
  
• Vulnerability Note VU#386964 - OpenSSL SSLv2 client code fails to properly check (US-CERT)
  
• HPSBMA02250 SSRT061275 rev.1 - HP System Management Homepage (SMH) for Linux and (HP)
  
• RHSA-2008:0264-3 Moderate: Red Hat Network Satellite Server Solaris client secur (Red Hat)
  
• RHSA-2008:0525-5 Red Hat Network Satellite Server Solaris client security update (Red Hat)
  
• RHSA-2008:0629-3 Moderate: Red Hat Network Satellite Server Solaris client secur (Red Hat)
  
• Sun Alert ID: 102668 - Security Vulnerabilities In OpenSSL Affect Sun Grid Engin (Sun)
  
• XEROX SECURITY BULLETIN XRX07-001 (XEROX)