exploits , vulnerabilities , articles , OpenSSL SSLv2 Client_Master_Key Remote Denial Of Service Vulnerability

Title	OpenSSL SSLv2 Client_Master_Key Remote Denial Of Service Vulnerability
Published	2003-10-02-12:00AM
Updated	2003-10-29-09:17PM
Class	Failure to Handle Exceptional Conditions
CVE	CAN-2002-1568
Remote	Yes
Local	No
Credit	Discovery of this vulnerability has been credited to Patrik Hornik <patrik.hornik@ebitech.sk>.
Vulnerable	RedHat openssl0960.9.66.i386.rpm RedHat Linux 7.2 i386 RedHat openssl0960.9.66.i386.rpm RedHat Linux 7.3 i386 RedHat openssl0960.9.611.i386.rpm RedHat Linux 8.0 i386 RedHat openssl095a0.9.5a16.i386.rpm RedHat Linux 8.0 i386 RedHat openssl095a0.9.5a11.i386.rpm RedHat Linux 7.3 i386 RedHat openssl095a0.9.5a11.i386.rpm RedHat Linux 7.2 i386 RedHat opensslpython0.9.63.i386.rpm RedHat Linux 7.1 i386 RedHat opensslpython0.9.5a14.i386.rpm RedHat Linux 7.0 i386 RedHat opensslperl0.9.6b8.i386.rpm RedHat Linux 7.2 i386 RedHat opensslperl0.9.6b29.i386.rpm RedHat Linux 8.0 i386 RedHat opensslperl0.9.6b18.i386.rpm RedHat Linux 7.3 i386 RedHat opensslperl0.9.63.i386.rpm RedHat Linux 7.1 i386 RedHat opensslperl0.9.5a14.i386.rpm RedHat Linux 7.0 i386 RedHat openssldevel0.9.6b8.i386.rpm RedHat Linux 7.2 i386 RedHat openssldevel0.9.6b29.i386.rpm RedHat Linux 8.0 i386 RedHat openssldevel0.9.6b18.i386.rpm RedHat Linux 7.3 i386 RedHat openssldevel0.9.63.i386.rpm RedHat Linux 7.1 i386 RedHat openssldevel0.9.5a14.i386.rpm RedHat Linux 7.0 i386 RedHat openssl0.9.6b8.i386.rpm RedHat Linux 7.2 i386 RedHat openssl0.9.6b29.i386.rpm RedHat Linux 8.0 i386 RedHat openssl0.9.6b18.i386.rpm RedHat Linux 7.3 i386 RedHat openssl0.9.63.i386.rpm RedHat Linux 7.1 i386 RedHat openssl0.9.5a14.i386.rpm RedHat Linux 7.0 i386 OpenSSL Project OpenSSL 0.9.6 e FreeBSD FreeBSD 4.6 FreeBSD FreeBSD 4.6 RELEASE OpenSSL Project OpenSSL 0.9.6 d Slackware Linux 8.1 OpenSSL Project OpenSSL 0.9.6 c Conectiva Linux 8.0 Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc MandrakeSoft Linux Mandrake 8.2 S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.0 i386 OpenSSL Project OpenSSL 0.9.6 b MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 OpenBSD OpenBSD 3.0 OpenBSD OpenBSD 3.1 RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Linux 7.2 RedHat Linux 7.2 i386 RedHat Linux 7.2 i686 RedHat Linux 7.2 ia64 RedHat Linux 7.3 RedHat Linux 7.3 i386 RedHat Linux Advanced Work Station 2.1 S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux Connectivity Server S.u.S.E. Linux Database Server S.u.S.E. Linux Enterprise Server 7 S.u.S.E. Linux Firewall on CD S.u.S.E. Office Server S.u.S.E. SuSE eMail Server III Sun Linux 5.0 Sun Linux 5.0.3 Sun Linux 5.0.5 Sun Linux 5.0.6 Sun Linux 5.0.7 OpenSSL Project OpenSSL 0.9.6 a Conectiva Linux 7.0 NetBSD NetBSD 1.5 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.3 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.2 i386 OpenSSL Project OpenSSL 0.9.6 Caldera OpenLinux Server 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Workstation 3.1.1 Conectiva Linux 6.0 EnGarde Secure Linux 1.0.1 HP Secure OS software for Linux 1.0 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc NetBSD NetBSD 1.5 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.6 NetBSD NetBSD 1.6 beta OpenBSD OpenBSD 2.9 OpenPKG OpenPKG 1.0 RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.0 sparc RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.2 alpha RedHat Linux 7.2 i386 RedHat Linux 7.3 RedHat Linux 7.3 i386 Trustix Secure Linux 1.1 Trustix Secure Linux 1.2 Trustix Secure Linux 1.5 IBM HTTP Server 1.3.28 IBM HTTP Server 1.3.26 .2 IBM HTTP Server 1.3.26 .1 IBM HTTP Server 1.3.26 IBM HTTP Server 1.3.19 .5 IBM HTTP Server 1.3.19 .4 IBM HTTP Server 1.3.19 .3 IBM HTTP Server 1.3.19 .2 IBM HTTP Server 1.3.19 .1 IBM HTTP Server 1.3.19 HP HPUX 11.0 IBM AIX 4.3.3 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6a RedHat Linux 7.1 S.u.S.E. Linux 7.1 Sun Solaris 2.6 Sun Solaris 7.0 IBM HTTP Server 1.3.12 .7 IBM HTTP Server 1.3.12 .6 IBM HTTP Server 1.3.12 .5 IBM HTTP Server 1.3.12 .4 IBM AIX 4.3.3 IBM AIX 5.1 RedHat Linux 7.1 S.u.S.E. Linux 7.2 IBM HTTP Server 1.3.12 .3 HP HPUX 11.0 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6a Sun Solaris 2.6 Sun Solaris 7.0 Sun Solaris 8.0 IBM HTTP Server 1.3.12 .2 Caldera OpenLinux 2.3 Caldera OpenLinux 2.4 HP HPUX 11.0 IBM AIX 4.3.3 Microsoft Windows NT 4.0 RedHat Linux 6.2 sparc Sun Solaris 2.6 Turbolinux Turbolinux 6.0 IBM HTTP Server 1.3.12 .1 IBM HTTP Server 1.3.12
Not Vulnerable	OpenSSL Project OpenSSL 0.9.6 k BlueCoat Systems CacheOS CA/SA 4.1.10 BlueCoat Systems Security Gateway OS 2.0 BlueCoat Systems Security Gateway OS 2.1.9 BlueCoat Systems Security Gateway OS 2.1.5001 SP1 BlueCoat Systems Security Gateway OS 3.0 BlueCoat Systems Security Gateway OS 3.1 Slackware Linux 8.1 OpenSSL Project OpenSSL 0.9.6 j OpenSSL Project OpenSSL 0.9.6 i HP Apache-Based Web Server 1.3.27 .00 HP Apache-Based Web Server 1.3.27 .01 HP HP-UX Apache-Based Web Server 1.0 .01 HP HP-UX Apache-Based Web Server 1.0 .02.01 HP HP-UX Apache-Based Web Server 1.0 .03.01 HP HP-UX Apache-Based Web Server 1.0 .04.01 HP HP-UX Apache-Based Web Server 1.0 .05.01 HP HP-UX Apache-Based Web Server 1.0 .06.01 HP HP-UX Apache-Based Web Server 1.0 .06.02 HP HP-UX Apache-Based Web Server 1.0 .07.01 HP HP-UX Apache-Based Web Server 1.0.1 .01 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc S.u.S.E. Linux Personal 8.2 OpenSSL Project OpenSSL 0.9.6 h OpenSSL Project OpenSSL 0.9.6 g Conectiva Linux Enterprise Edition 1.0 FreeBSD FreeBSD 4.7 FreeBSD FreeBSD 4.7 -RELEASE HP Apache-Based Web Server 2.0.43 .00 HP Apache-Based Web Server 2.0.43 .04 HP Webmin-Based Admin 1.0 .01 Immunix Immunix OS 7 NetBSD NetBSD 1.6 OpenPKG OpenPKG 1.1 OpenSSL Project OpenSSL 0.9.6 f
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-19 Serv-U File Server User Directory Information Disclosure Vulnerability
2009-12-18 ReVou Comment Field HTML Injection Vulnerability
2009-12-18 Adobe Flash Media Server Resource Exhaustion Remote Denial of Service Vulnerability
2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities