• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

OpenSSL ASN.1 Parsing Vulnerabilities

References:

• A vulnerability has been discovered in F-Secure SSH in the way it handles digita (F-Secure)
  
• A vulnerability in F-Secure SSH's way to handles digital certificates (F-Secure)
  
• Alert ID: 57599 (Sun)
  
• Apple Security Updates (Apple)
  
• Apple Software Downloads (Apple)
  
• CERT Advisory CA-2003-26 Multiple Vulnerabilities in SSL/TLS Implementations (CERT/CC)
  
• Cisco Security Advisory: SSL Implementation Vulnerabilities (Cisco)
  
• eDirectory TID10087450 (Novell) (Novell)
  
• eDirectory TID2967586 (Novell)
  
• eDirectory TID2968007 (Novell) (Novell)
  
• ESX OpenSSL updates (VMware)
  
• Field Test File for GW6 SP4 NLM & Win Agents - TID2967420 (Novell)
  
• Field Test File GW 6.5 SP2 NLM/Win Agents - TID2967421 (Novell)
  
• Firewall Server Home Page (BorderWare)
  
• FTF: GroupWise 6 Internet Agent SP4 rev G - TID2967425 (Novell)
  
• FTF: GroupWise 6 SP4 WebAccess Revision F - TID2967411 (Novell)
  
• FTF: GroupWise 6.5 SP2 WebAccess Revision B - TID2967408 (Novell)
  
• FTF:GroupWise 6.5.1 Internet Agent Rev E - TID2967399 (Novell)
  
• GSX OpenSSL updates (VMware)
  
• iChain 2.2 Support Pack 2 beta - TID2967175 (Novell)
  
• MDKSA-2003:098 : openssl (Mandrake)
  
• MSS-OAR-E01-2004.0422.1 (IBM)
  
• NetMail 3.1f Update for Linux - TID2967210 (Novell)
  
• NetMail 3.1f Update for NetWare - TID2967209 (Novell)
  
• NetMail 3.1f Update for Windows - TID2967208 (Novell)
  
• NISCC Vulnerability Advisory 006489/OpenSSL (NISCC)
  
• NISCC vulnerability advisory on SSL (secure sockets layer) and TLS (transport (Novell)
  
• Novell iManager 2.0.2 ASN.1 Parsing vulnerability in Apache module (CIRT)
  
• Novell Nsure Audit 1.0.1 (Win32 version) - CIRT-31 (CIRT)
  
• OpenSSL Security Advisory [30 September 2003] (OpenBSD)
  
• OpenSSL security bugs (Stonesoft)
  
• Oracle Support Metalink (Oracle)
  
• Patches Now Available For SmoothWall GPL 1.0, 2.0b6 "voyager" (SmoothWall)
  
• Regarding NISCC vulnerability advisory on SSL and TLS - TID10087450 (Novell)
  
• Release notice for Ingate Firewall 3.3.1 and Ingate SIParator 3.3.1 (InGate)
  
• RHSA-2003-293 (Red Hat)
  
• Security Advisory: OpenSSL Vulnerability (Blue Coat Systems)
  
• Security Alerts (Novell)
  
• Security Update 4 - TID2968981 (Novell)
  
• SSH IPSec Toolkit Security Bugs (Stonesoft)
  
• SSH Secure Shell Security Vulnerability in BER Decoding (SSH Communications Security)
  
• SSH Sentinel Security Vulnerability in BER Decoding (SSH Communications Security)
  
• SSL Update for CERT CA200326 and older SSL issues (Oracle)
  
• Sun Alert ID: 57100 (Sun Microsystems)
  
• Sun Alert ID: 57444 (Sun)
  
• Sun Alert ID: 57472 (Sun)
  
• Sun Alert ID: 57475 (Sun)
  
• Sun Alert ID: 57498 (Sun)
  
• Sun Linux Support - Sun Linux Patches (Sun)
  
• Tarantella Security Bulletin #08 (Tarantella)
  
• TID10097379 - Security Vulnerability against webadmin.exe (Novell)
  
• Vendor Home Page (BorderWare)
  
• Vulnerabilities in ASN.1 parsing (OpenSSL)
  
• Vulnerability Detected: 170.23.146.40:443 - OpenSSL Overflow Via Invalid Certifi (IBM)
  
• Vulnerability Note VU#255484 (CERT/CC)
  
• Vulnerability Note VU#380864 (CERT/CC)
  
• Vulnerability Note VU#686224 (CERT/CC)
  
• Vulnerability Note VU#732952 (CERT/CC)
  
• Vulnerability Note VU#935264 (CERT/CC)
  
• VMware GSX Server and ESX Server OpenSSL vulnerability patches (VMware )