OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability

Threat level definition

OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability

References:

ASA-2006-260 - HP-UX OpenSSL Denial of Service (DoS), Increase Privilege (HPSBUX (Avaya)
Cisco Applied Intelligence Response: Detecting and Mitigating Exploitation of Mu (Cisco)
Cisco Security Response: Multiple Vulnerabilities in OpenSSL library (Cisco)
Critical Patch Update - January 2007 (Oracle)
cwRsync 2.0.10 released (cwRsync)
HPSBTU02207 SSRT061213, SSRT061239, SSRT071304 rev.1 - HP Tru64 UNIX SSL and BIN (HP)
HPSBUX02174 SSRT061239 rev.1 HP-UX Running OpenSSL Denial of Service (DoS), Incr (HP)
IBM Hardware Management Console (IBM)
IPCop 1.4.13 released (IPCop)
Kolab Security Issue 11 20061002 (Kolab)
Release notice for Ingate Firewall 4.5.2 and Ingate SIParator 4.5.2 (Ingate)
SnapGear Firmware Release Notes (Secure Computing)
Stonesoft Corp. Security Advisory - OpenSSL vulnerabilities in Stonesoft product (Stonesoft)
Sun Alert ID: 102711 (Sun)
Vulnerability Note VU#547300 (US-CERT)
Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow (snagg@securenetwork.it)
HPSBMA02250 SSRT061275 rev.1 - HP System Management Homepage (SMH) for Linux and (HP)
RHSA-2008:0264-3 Moderate: Red Hat Network Satellite Server Solaris client secur (Red Hat)
RHSA-2008:0525-5 Red Hat Network Satellite Server Solaris client security update (Red Hat)
Sun Alert ID: 102668 - Security Vulnerabilities In OpenSSL Affect Sun Grid Engin (Sun)
Technical Bulletin Security Advisory - Document ID 2006007439 (Nortel Networks)
XEROX SECURITY BULLETIN XRX07-001 (XEROX)

Privacy Statement
Copyright 2007, SecurityFocus