Multiple bugs in OpenSSL updated since 30.09.2003
Published:		14.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		3151
Type:		remote
Level:		7/10
Description:		Rpbolem with stack corruption, uninitialized memory references.

Affected:		OPENSSL : OpenSSL 0.9
		APPLE : Mac OS X 10.2
		CRAY : COS 3.4
		STUNNEL : Stunnel 0.9
		PWLIB : PWLib 1.4
		PWLIB : PWLib 1.5
		NOVELL : iManager 2.02

Original document		CIRT Advisory, [Full-disclosure] [CIRT.DK - Advisory] Novell iManager 2.0.2 ASN.1 Parsing vulnerability in Apache module (14.06.2005)
		REDHAT, [RHSA-2004:048-01] Updated PWLib packages fix protocol security issues (16.02.2004)
		OPENSSL, [OpenSSL Advisory] Denial of Service in ASN.1 parsing (05.11.2003)
		Patrik Hornik, New OpenSSL remote vulnerability (issue date 2003/10/02) (03.10.2003)
		CERT, CERT Advisory CA-2003-26 Multiple Vulnerabilities in SSL/TLS Implementations (03.10.2003)
		OPENSSL, [Full-Disclosure] [OpenSSL Advisory] Vulnerabilities in ASN.1 parsing (30.09.2003)
		OPENPKG, Subject: [OpenPKG-SA-2003.044] OpenPKG Security Advisory (openssl) (30.09.2003)

Files:		OpenSSL ASN.1 parsing bugs PoC / brute forcer
Discuss:		Read or add your comments to this news (0 comments)