Multiple Vendor S/MIME ASN.1 Parsing Denial of Service Vulnerabilities

Solution:
SGI have released an advisory (20040402-01-U) and a patch to address this issue in SGI ProPack version 2.3 and 2.4. The vendor has advised that customers apply this patch as soon as possible. Further details regarding obtaining and applying an appropriate patch can be found in the referenced advisory. Patch is linked below.

Mandrake has released an advisory MDKSA-2004:021 to address this issue. Please see the referenced advisory for more information.

Redhat has released advisory RHSA-2004:112-01 dealing with this issue. Please see the reference for more information.

RedHat has released an update to the previously released advisory RHSA-2004:110-19, RHSA-2004:110-20 is now available and deals with this issue for their Enterprise linux distribution. Please see the referenced advisory for more information and details on obtaining fixes.

HP has released advisory HPSBUX01036-SSRT4722 dealing with this and other issues; fixes have been provided.

SGI has released an advisory (20040506-01-U) with Patch 10075 for SGI
ProPack 3 to address this and other issues. Please see the referenced
advisory for more information.

The Fedora Legacy project has released advisory FLSA-2004:2089 along with fixes to address multiple issues in RedHat Fedora Core 1, and RedHat Linux 7.3 and 9.0. Please see the referenced advisory for further information.


Mozilla Browser 1.4 b

Mozilla Browser 1.4

Mozilla Browser 1.4 a

Mozilla Browser 1.4.1

Mozilla Browser 1.4.2

SGI ProPack 2.3

SGI ProPack 2.4

SGI ProPack 3.0

Mozilla Network Security Services (NSS) 3.8


 

Privacy Statement
Copyright 2010, SecurityFocus