OpenSSL TLS 'heartbeat' Extension Multiple Information Disclosure Vulnerabilities

Bugtraq ID: 66690
Class: Design Error
CVE: CVE-2014-0160
Remote: Yes
Local: No
Published: Apr 07 2014 12:00AM
Updated: Jul 25 2014 12:27AM
Credit: Neel Mehta
Vulnerable: Ubuntu Ubuntu Linux 12.04 LTS i386
Ubuntu Ubuntu Linux 12.04 LTS amd64
Red Hat Enterprise Virtualization Hypervisor for RHEL 6 0
Red Hat Enterprise Linux Workstation Optional 6
Red Hat Enterprise Linux Workstation 6
Red Hat Enterprise Linux Server Optional 6
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux HPC Node Optional 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Desktop Optional 6
Red Hat Enterprise Linux Desktop 6
Python Software Foundation Python 3.2.2
Python Software Foundation Python 3.1.1
Python Software Foundation Python 3.0.1
Python Software Foundation Python 2.7.2
Python Software Foundation Python 2.6.5
Python Software Foundation Python 2.6.2
Python Software Foundation Python 2.5.6
Python Software Foundation Python 2.5.5
Python Software Foundation Python 2.5.3
Python Software Foundation Python 2.5.2
Python Software Foundation Python 2.5.1
Python Software Foundation Python 2.4.5
Python Software Foundation Python 2.4.4
Python Software Foundation Python 2.4.3
+ Trustix Secure Linux 3.0.5
Python Software Foundation Python 2.4.2
Python Software Foundation Python 2.4.1
Python Software Foundation Python 2.4
Python Software Foundation Python 2.3.6
Python Software Foundation Python 2.3.5
Python Software Foundation Python 2.3.4
Python Software Foundation Python 2.3.3
+ MandrakeSoft Corporate Server 3.0 x86_64
+ MandrakeSoft Corporate Server 3.0
+ Mandriva Linux Mandrake 10.0 AMD64
+ Mandriva Linux Mandrake 10.0
+ Mandriva Linux Mandrake 9.2 amd64
+ Mandriva Linux Mandrake 9.2
+ S.u.S.E. Linux Personal 9.0 x86_64
+ S.u.S.E. Linux Personal 9.0
Python Software Foundation Python 2.3.2
Python Software Foundation Python 2.3.1
Python Software Foundation Python 2.3
Python Software Foundation Python 2.2.3
+ Red Hat Enterprise Linux AS 3
+ RedHat Desktop 3.0
+ RedHat Enterprise Linux ES 3
+ RedHat Enterprise Linux WS 3
+ Ubuntu Ubuntu Linux 4.1 ppc
+ Ubuntu Ubuntu Linux 4.1 ia64
+ Ubuntu Ubuntu Linux 4.1 ia32
Python Software Foundation Python 2.2.2
Python Software Foundation Python 2.2.1
+ Debian Linux 3.0 sparc
+ Debian Linux 3.0 s/390
+ Debian Linux 3.0 ppc
+ Debian Linux 3.0 mipsel
+ Debian Linux 3.0 mips
+ Debian Linux 3.0 m68k
+ Debian Linux 3.0 ia-64
+ Debian Linux 3.0 ia-32
+ Debian Linux 3.0 hppa
+ Debian Linux 3.0 arm
+ Debian Linux 3.0 alpha
+ Debian Linux 3.0
+ Gentoo Linux 1.4 _rc1
+ Gentoo Linux 1.2
+ MandrakeSoft Corporate Server 2.1 x86_64
+ MandrakeSoft Corporate Server 2.1
+ Mandriva Linux Mandrake 9.0
+ OpenPKG OpenPKG 1.1
+ S.u.S.E. Linux 8.1
Python Software Foundation Python 2.2
+ Conectiva Linux 8.0
+ Mandriva Linux Mandrake 8.2 ppc
+ Mandriva Linux Mandrake 8.2
+ Mandriva Linux Mandrake 8.1 ia64
+ Mandriva Linux Mandrake 8.1
Python Software Foundation Python 2.1.3
Python Software Foundation Python 2.1.2
Python Software Foundation Python 2.1.1
Python Software Foundation Python 2.1
Python Software Foundation Python 2.0.1
Python Software Foundation Python 2.0
Python Software Foundation Python 1.6.1
Python Software Foundation Python 1.6
Python Software Foundation Python 1.5.2
+ Caldera OpenLinux Server 3.1.1
+ Caldera OpenLinux Server 3.1
+ Caldera OpenLinux Workstation 3.1.1
+ Caldera OpenLinux Workstation 3.1
+ Conectiva Linux 6.0
+ Debian Linux 3.0
+ Debian Linux 2.2 sparc
+ Debian Linux 2.2 powerpc
+ Debian Linux 2.2 IA-32
+ Debian Linux 2.2 arm
+ Debian Linux 2.2 alpha
+ Debian Linux 2.2 68k
+ Debian Linux 2.2
+ MandrakeSoft Single Network Firewall 7.2
+ Mandriva Linux Mandrake 7.2
+ Red Hat Linux 6.2
+ RedHat Linux 7.3
+ RedHat Linux 7.2
+ RedHat Linux 7.1
+ RedHat Linux 7.0
+ RedHat Linux for iSeries 7.1
+ RedHat Linux for pSeries 7.1
+ Sun Linux 5.0.7
+ Trustix Secure Linux 1.5
Python Software Foundation Python 3.3
Python Software Foundation Python 3.2
Python Software Foundation Python 3.1.2
Python Software Foundation Python 3.1
Python Software Foundation Python 2.7
Python Software Foundation Python 2.6
Python Software Foundation Python 2.5
Python Software Foundation Python 2.4
Oracle Enterprise Linux 6.2
Oracle Enterprise Linux 6
Opera Software Opera 11.10
OpenSSL Project OpenSSL 1.0.1c
OpenSSL Project OpenSSL 1.0.1a
OpenSSL Project OpenSSL 1.0.1
McAfee Security for Microsoft Exchange 7.6
McAfee ePolicy Orchestrator (ePO) 4.5
Kerio Kerio Control 7.1.0 Patch 1
Kerio Kerio Control 7.1.0
Ipswitch IMail Server 11.02
Ipswitch IMail Server 11.01
IBM WebSphere MQ 7.0.1 .2
IBM WebSphere MQ 7.0.1 .1
IBM WebSphere MQ 7.0 2
IBM WebSphere MQ 6.0.2 6
IBM WebSphere MQ 6.0.2 .9
IBM WebSphere MQ 6.0.2 .7
IBM WebSphere MQ 6.0.2 .6
IBM WebSphere MQ 6.0.2 .5
IBM WebSphere MQ 6.0.2 .4
IBM WebSphere MQ 6.0.2 .3
IBM WebSphere MQ 6.0.2 .2
IBM WebSphere MQ 6.0.2 .1
IBM WebSphere MQ 6.0.1 .1
IBM WebSphere MQ 6.0.1
IBM WebSphere MQ 5.3.1
IBM WebSphere MQ 5.3
IBM WebSphere MQ 7.0.1.5
IBM WebSphere MQ 7.0.1.4
IBM WebSphere MQ 7.0.1.3
IBM WebSphere MQ 7.0.1.0
IBM WebSphere MQ 7.0.0.1
IBM WebSphere MQ 7.0
IBM WebSphere MQ 6.0.2.8
IBM WebSphere MQ 6.0.2.11
IBM WebSphere MQ 6.0.2.10
IBM WebSphere MQ 6.0.2.0
IBM WebSphere MQ 6.0.1.0
IBM Tivoli Management Framework 4.1.1
IBM Rational ClearQuest 8.0.0.2
IBM Rational ClearQuest 8.0.0.1
IBM Rational ClearQuest 7.1.2.6
IBM Rational ClearQuest 7.1.2.2
IBM Rational ClearQuest 7.1.2.1
IBM Rational ClearQuest 7.1.2
IBM Rational ClearCase 7.1.2.2
IBM IBM Rational ClearQuest 8.0
IBM IBM Rational ClearQuest 7.1.2.5
IBM AIX 7.1
IBM AIX 6.1
IBM AIX 5.3
Gentoo Linux
Debian Linux 6.0 sparc
Debian Linux 6.0 s/390
Debian Linux 6.0 powerpc
Debian Linux 6.0 mips
Debian Linux 6.0 ia-64
Debian Linux 6.0 ia-32
Debian Linux 6.0 arm
Debian Linux 6.0 amd64
Cisco Wireless Location Appliance 0
Cisco TelePresence Video Communication Server (VCS) 0
Cerberus Cerberus FTP Server 4.0.9.8
CentOS CentOS 6
Bluecat Networks Adonis (Firmware) 4.1 .43
Avaya Aura System Manager 6.2
Avaya Aura Session Manager 6.2.1
Avaya Aura Session Manager 6.2
Avaya Aura Presence Services 6.1.1
Attachmate Reflection X 14.0.5
Attachmate Reflection X 14.1
Attachmate Reflection X 14.0
Attachmate Reflection Suite for X 14.0.5
Attachmate Reflection for UNIX and OpenVMS 14.0.5
Attachmate Reflection for the Multi-Host Enterprise Pro 14.0.5
Attachmate Reflection for IBM 14.0.5
Attachmate Reflection for IBM 14
Attachmate Reflection for HP 14.0.5
Attachmate Reflection 14.1
Attachmate Reflection 14.0 SP1
Attachmate Reflection 14.0
Apple Airport Extreme 0
Not Vulnerable: Cisco CSS11500 Content Services Switch
Cisco ACE Module 0
Blue Coat Systems Policy Center 0
Blue Coat Systems PacketShaper 0
Blue Coat Systems Intelligence Center 0
Blue Coat Systems Director 0


 

Privacy Statement
Copyright 2010, SecurityFocus