• info
• discussion
• exploit
• solution
• references

OpenSSL Multiple Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu libcrypto0.9.8-udeb_0.9.8e-5ubuntu3.4_powerpc.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8e-5ubuntu3.4_powerpc.udeb


• Ubuntu libssl-dev_0.9.8e-5ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 e-5ubuntu3.4_powerpc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8e-5ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8e-5ubuntu3.4_powerpc.deb


• Ubuntu libssl0.9.8_0.9.8e-5ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8e-5ubuntu3.4_powerpc.deb


• Ubuntu openssl_0.9.8e-5ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8e-5 ubuntu3.4_powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.2_powerpc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -10.1ubuntu2.2_powerpc.udeb


• Ubuntu libssl-dev_0.9.8g-10.1ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubun tu2.2_powerpc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10. 1ubuntu2.2_powerpc.deb


• Ubuntu libssl0.9.8_0.9.8g-10.1ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubu ntu2.2_powerpc.deb


• Ubuntu openssl-doc_0.9.8g-10.1ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-10.1ubuntu2.2_all.deb


• Ubuntu openssl_0.9.8g-10.1ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2 .2_powerpc.deb

Debian Linux 5.0 alpha

• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny1_alpha.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny1_alpha.udeb


• Debian libssl-dev_0.9.8g-15+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny1_alpha.deb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny1_alpha.deb


• Debian libssl0.9.8_0.9.8g-15+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny1_alpha.deb


• Debian openssl_0.9.8g-15+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny1_alpha.deb

OpenBSD OpenBSD 4.4

• OpenBSD 012_openssl.patch
  for OpenBSD 4.4
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/012_openssl.patch

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.2_sparc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -10.1ubuntu2.2_sparc.udeb


• Ubuntu libssl-dev_0.9.8g-10.1ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubun tu2.2_sparc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10. 1ubuntu2.2_sparc.deb


• Ubuntu libssl0.9.8_0.9.8g-10.1ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubu ntu2.2_sparc.deb


• Ubuntu openssl-doc_0.9.8g-10.1ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-10.1ubuntu2.2_all.deb


• Ubuntu openssl_0.9.8g-10.1ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2 .2_sparc.deb

Debian Linux 5.0 armel

• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny1_armel.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny1_armel.udeb


• Debian libssl-dev_0.9.8g-15+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny1_armel.deb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny1_armel.deb


• Debian libssl0.9.8_0.9.8g-15+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny1_armel.deb


• Debian openssl_0.9.8g-15+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny1_armel.deb

MandrakeSoft Linux Mandrake 2009.0 x86_64

• Mandriva lib64openssl0.9.8-0.9.8h-3.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64openssl0.9.8-devel-0.9.8h-3.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64openssl0.9.8-static-devel-0.9.8h-3.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openssl-0.9.8h-3.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 mips

• Debian libcrypto0.9.8-udeb_0.9.8c-4etch5_mips.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8c-4etch5_mips.udeb


• Debian libssl-dev_0.9.8c-4etch5_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8c-4etch5_mips.deb


• Debian libssl0.9.7-dbg_0.9.7k-3.1etch3_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl097/libssl0.9.7- dbg_0.9.7k-3.1etch3_mips.deb


• Debian libssl0.9.7_0.9.7k-3.1etch3_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl097/libssl0.9.7_ 0.9.7k-3.1etch3_mips.deb


• Debian libssl0.9.8-dbg_0.9.8c-4etch5_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8c-4etch5_mips.deb


• Debian libssl0.9.8_0.9.8c-4etch5_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8c-4etch5_mips.deb


• Debian openssl_0.9.8c-4etch5_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8c- 4etch5_mips.deb

Debian Linux 4.0 arm

• Debian libcrypto0.9.8-udeb_0.9.8c-4etch5_arm.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8c-4etch5_arm.udeb


• Debian libssl-dev_0.9.8c-4etch5_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8c-4etch5_arm.deb


• Debian libssl0.9.7-dbg_0.9.7k-3.1etch3_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl097/libssl0.9.7- dbg_0.9.7k-3.1etch3_arm.deb


• Debian libssl0.9.7_0.9.7k-3.1etch3_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl097/libssl0.9.7_ 0.9.7k-3.1etch3_arm.deb


• Debian libssl0.9.8-dbg_0.9.8c-4etch5_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8c-4etch5_arm.deb


• Debian libssl0.9.8_0.9.8c-4etch5_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8c-4etch5_arm.deb


• Debian openssl_0.9.8c-4etch5_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8c- 4etch5_arm.deb

Debian Linux 5.0 hppa

• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny1_hppa.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny1_hppa.udeb


• Debian libssl-dev_0.9.8g-15+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny1_hppa.deb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny1_hppa.deb


• Debian libssl0.9.8_0.9.8g-15+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny1_hppa.deb


• Debian openssl_0.9.8g-15+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny1_hppa.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.5_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-4ubuntu3.5_i386.udeb


• Ubuntu libssl-dev_0.9.8g-4ubuntu3.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-4ubuntu3.5_i386.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-4ubuntu3.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-4ubuntu3.5_i386.deb


• Ubuntu libssl0.9.8_0.9.8g-4ubuntu3.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-4ubuntu3.5_i386.deb


• Ubuntu openssl-doc_0.9.8g-4ubuntu3.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-4ubuntu3.5_all.deb


• Ubuntu openssl_0.9.8g-4ubuntu3.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4 ubuntu3.5_i386.deb

OpenSSL Project OpenSSL 0.9.8 i

• OpenSSL Project openssl-0.9.8k.tar.gz
  http://www.openssl.org/source/openssl-0.9.8k.tar.gz

OpenSSL Project OpenSSL 0.9.8 c

• OpenSSL Project openssl-0.9.8k.tar.gz
  http://www.openssl.org/source/openssl-0.9.8k.tar.gz

VooDoo cIRCle 1.0

• VooDoo voodoo-circle-win-x86_32-bin-ipv6-1.1.36.zip
  i386
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_3 2-bin-ipv6-1.1.36.zip


• VooDoo voodoo-circle-win-x86_64-bin-ipv6-1.1.36.zip
  AMD64
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_6 4-bin-ipv6-1.1.36.zip

VooDoo cIRCle 1.0.11

• VooDoo voodoo-circle-win-x86_32-bin-ipv6-1.1.36.zip
  i386
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_3 2-bin-ipv6-1.1.36.zip


• VooDoo voodoo-circle-win-x86_64-bin-ipv6-1.1.36.zip
  AMD64
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_6 4-bin-ipv6-1.1.36.zip

VooDoo cIRCle 1.0.3

• VooDoo voodoo-circle-win-x86_32-bin-ipv6-1.1.36.zip
  i386
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_3 2-bin-ipv6-1.1.36.zip


• VooDoo voodoo-circle-win-x86_64-bin-ipv6-1.1.36.zip
  AMD64
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_6 4-bin-ipv6-1.1.36.zip

VooDoo cIRCle 1.0.7

• VooDoo voodoo-circle-win-x86_32-bin-ipv6-1.1.36.zip
  i386
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_3 2-bin-ipv6-1.1.36.zip


• VooDoo voodoo-circle-win-x86_64-bin-ipv6-1.1.36.zip
  AMD64
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_6 4-bin-ipv6-1.1.36.zip

VooDoo cIRCle 1.1.34

• VooDoo voodoo-circle-win-x86_32-bin-ipv6-1.1.36.zip
  i386
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_3 2-bin-ipv6-1.1.36.zip


• VooDoo voodoo-circle-win-x86_64-bin-ipv6-1.1.36.zip
  AMD64
  http://downloads.sourceforge.net/voodoo-circle/voodoo-circle-win-x86_6 4-bin-ipv6-1.1.36.zip

MandrakeSoft Corporate Server 3.0

• Mandriva openssl-0.9.7c-3.9.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva lib64openssl0.9.7-0.9.7g-2.8.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64openssl0.9.7-devel-0.9.7g-2.8.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64openssl0.9.7-static-devel-0.9.7g-2.8.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openssl-0.9.7g-2.8.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

PHP PHP 5.0 .0

• PHP php-5.2.9-2-Win32.zip
  for Windows
  http://ca.php.net/get/php-5.2.9-2-Win32.zip/from/a/mirror

PHP PHP 5.0.1

• PHP php-5.2.9-2-Win32.zip
  for Windows
  http://ca.php.net/get/php-5.2.9-2-Win32.zip/from/a/mirror

PHP PHP 5.0.2

• PHP php-5.2.9-2-Win32.zip
  for Windows
  http://ca.php.net/get/php-5.2.9-2-Win32.zip/from/a/mirror

PHP PHP 5.0.4

• PHP php-5.2.9-2-Win32.zip
  for Windows
  http://ca.php.net/get/php-5.2.9-2-Win32.zip/from/a/mirror

PHP PHP 5.1.4

• PHP php-5.2.9-2-Win32.zip
  for Windows
  http://ca.php.net/get/php-5.2.9-2-Win32.zip/from/a/mirror

PHP PHP 5.1.6

• PHP php-5.2.9-2-Win32.zip
  for Windows
  http://ca.php.net/get/php-5.2.9-2-Win32.zip/from/a/mirror

PHP PHP 5.2.6

• PHP php-5.2.9-2-Win32.zip
  for Windows
  http://ca.php.net/get/php-5.2.9-2-Win32.zip/from/a/mirror

PHP PHP 5.2.9

• PHP php-5.2.9-2-Win32.zip
  for Windows
  http://ca.php.net/get/php-5.2.9-2-Win32.zip/from/a/mirror