• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

OpenSSL SSL_Get_Shared_Ciphers Off-by-One Buffer Overflow Vulnerability

References:

• openssl - Check-in [16587] (OpenSSL Project)
  
• OpenSSL Home Page (OpenSSL)
  
• Sun Alert ID: 103130 Security Vulnerability in Solaris 10 OpenSSL SSL_get_shared (Sun Microsystems)
  
• OpenSSL Security Advisory (Ben Laurie )
  
• OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow (Moritz Jodeit )
  
• Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow (snagg@securenetwork.it)
  
• VMSA-2008-0013 Updated ESX packages for OpenSSL, net-snmp, perl (VMware Security Team )
  
• 2008008707: Nortel response to Sun Alert 200858 - Security Vulnerability in Sola (Nortel Networks)
  
• ASA-2007-481 Security Vulnerability in Solaris 10 OpenSSL SSL_get_shared_ciphers (Avaya)
  
• ASA-2007-485 OpenSSL security update (RHSA-2007-0813) (Avaya)
  
• OpenBSD 4.0 release errata & patch list (OpenBSD)
  
• Red Hat Security Advisory RHSA-2007:0964-4 (Red Hat)
  
• RHSA-2007:0813-2 - openssl security update (RedHat)
  
• RHSA-2007:1003 Moderate: openssl security and bug fix update (Red Hat)
  
• Security Vulnerability in Solaris 10 OpenSSL SSL_get_shared_ciphers() Function (Sun Microsystems)