exploits , vulnerabilities , articles , OpenSSL ASN.1 Large Recursion Remote Denial Of Service Vulnerability

Title	OpenSSL ASN.1 Large Recursion Remote Denial Of Service Vulnerability
Published	2003-11-04-12:00AM
Updated	2005-10-31-08:56PM
Class	Input Validation Error
CVE	CAN-2003-0851
Remote	Yes
Local	No
Credit	Discovery credited to Novell.
Vulnerable	SGI IRIX 6.5.21 m SGI IRIX 6.5.21 f SGI IRIX 6.5.20 m SGI IRIX 6.5.20 f SGI IRIX 6.5.19 m SGI IRIX 6.5.19 f RedHat Linux 8.0 RedHat Linux 7.3 RedHat Linux 7.2 Opera Software Opera Web Browser 7.22 Opera Software Opera Web Browser 7.21 Opera Software Opera Web Browser 7.20 OpenSSL Project OpenSSL 0.9.7 b OpenPKG OpenPKG 1.3 OpenSSL Project OpenSSL 0.9.7 a Conectiva Linux 9.0 OpenPKG OpenPKG Current OpenSSL Project OpenSSL 0.9.7 Caldera OpenUnix 8.0 Caldera UnixWare 7.1.1 Caldera UnixWare 7.1.3 FreeBSD FreeBSD 5.0 OpenBSD OpenBSD 3.2 OpenPKG OpenPKG 1.2 OpenSSL Project OpenSSL 0.9.6 k BlueCoat Systems CacheOS CA/SA 4.1.10 BlueCoat Systems Security Gateway OS 2.0 BlueCoat Systems Security Gateway OS 2.1.9 BlueCoat Systems Security Gateway OS 2.1.5001 SP1 BlueCoat Systems Security Gateway OS 3.0 BlueCoat Systems Security Gateway OS 3.1 Slackware Linux 8.1 OpenSSL Project OpenSSL 0.9.6 j OpenSSL Project OpenSSL 0.9.6 i HP ApacheBased Web Server 1.3.27 .00 HP ApacheBased Web Server 1.3.27 .01 HP HPUX ApacheBased Web Server 1.0 .01 HP HPUX ApacheBased Web Server 1.0 .02.01 HP HPUX ApacheBased Web Server 1.0 .03.01 HP HPUX ApacheBased Web Server 1.0 .04.01 HP HPUX ApacheBased Web Server 1.0 .05.01 HP HPUX ApacheBased Web Server 1.0 .06.01 HP HPUX ApacheBased Web Server 1.0 .06.02 HP HPUX ApacheBased Web Server 1.0 .07.01 HP HPUX ApacheBased Web Server 1.0.1 .01 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc S.u.S.E. Linux Personal 8.2 OpenSSL Project OpenSSL 0.9.6 h OpenSSL Project OpenSSL 0.9.6 g Conectiva Linux Enterprise Edition 1.0 FreeBSD FreeBSD 4.7 FreeBSD FreeBSD 4.7 RELEASE HP ApacheBased Web Server 2.0.43 .00 HP ApacheBased Web Server 2.0.43 .04 HP WebminBased Admin 1.0 .01 Immunix Immunix OS 7 NetBSD NetBSD 1.6 OpenPKG OpenPKG 1.1 OpenSSL Project OpenSSL 0.9.6 f OpenSSL Project OpenSSL 0.9.6 e FreeBSD FreeBSD 4.6 FreeBSD FreeBSD 4.6 RELEASE OpenSSL Project OpenSSL 0.9.6 d Slackware Linux 8.1 OpenSSL Project OpenSSL 0.9.6 c Conectiva Linux 8.0 Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc MandrakeSoft Linux Mandrake 8.2 S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.0 i386 OpenSSL Project OpenSSL 0.9.6 b MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 OpenBSD OpenBSD 3.0 OpenBSD OpenBSD 3.1 RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Linux 7.2 RedHat Linux 7.2 i386 RedHat Linux 7.2 i686 RedHat Linux 7.2 ia64 RedHat Linux 7.3 RedHat Linux 7.3 i386 RedHat Linux Advanced Work Station 2.1 S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux Connectivity Server S.u.S.E. Linux Database Server S.u.S.E. Linux Enterprise Server 7 S.u.S.E. Linux Firewall on CD S.u.S.E. Office Server S.u.S.E. SuSE eMail Server III Sun Linux 5.0 Sun Linux 5.0.3 Sun Linux 5.0.5 Sun Linux 5.0.6 Sun Linux 5.0.7 OpenSSL Project OpenSSL 0.9.6 a Conectiva Linux 7.0 NetBSD NetBSD 1.5 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.3 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.2 i386 OpenSSL Project OpenSSL 0.9.6 Caldera OpenLinux Server 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Workstation 3.1.1 Conectiva Linux 6.0 EnGarde Secure Linux 1.0.1 HP Secure OS software for Linux 1.0 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc NetBSD NetBSD 1.5 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.6 NetBSD NetBSD 1.6 beta OpenBSD OpenBSD 2.9 OpenPKG OpenPKG 1.0 RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.0 sparc RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.2 alpha RedHat Linux 7.2 i386 RedHat Linux 7.3 RedHat Linux 7.3 i386 Trustix Secure Linux 1.1 Trustix Secure Linux 1.2 Trustix Secure Linux 1.5 NetBSD NetBSD 1.6.1 NetBSD NetBSD 1.6 Cisco PIX Firewall 6.3 (1) Cisco PIX Firewall 6.2.2 .111 Cisco PIX Firewall 6.2.2 Cisco PIX Firewall 6.2.1 Cisco PIX Firewall 6.2 (3) Cisco PIX Firewall 6.2 (2) Cisco PIX Firewall 6.2 (1) Cisco PIX Firewall 6.2 Cisco PIX Firewall 6.1.4 Cisco PIX Firewall 6.1.3 Cisco PIX Firewall 6.1 (5) Cisco PIX Firewall 6.1 (4) Cisco PIX Firewall 6.1 (3) Cisco PIX Firewall 6.1 (2) Cisco PIX Firewall 6.1 (1) Cisco PIX Firewall 6.1 Cisco PIX Firewall 515 Cisco PIX Firewall 520 Cisco PIX Firewall 6.0.4 Cisco PIX Firewall 6.0.3 Cisco PIX Firewall 6.0 (4.101) Cisco PIX Firewall 6.0 (4) Cisco PIX Firewall 6.0 (2) Cisco PIX Firewall 6.0 (1) Cisco PIX Firewall 6.0 Cisco PIX Firewall 515 Cisco PIX Firewall 520 Cisco IOS 12.2 SY Cisco IOS 12.2 SX Cisco IOS 12.1 (11b)E Cisco IOS 12.1 (11)E Cisco Firewall Services Module 2.1 (0.208) Cisco CSS11000 Content Services Switch
Not Vulnerable	Opera Software Opera Web Browser 7.23 OpenSSL Project OpenSSL 0.9.7 c OpenPKG OpenPKG 2.0 Slackware Linux -current Slackware Linux 9.0 Slackware Linux 9.1 OpenSSL Project OpenSSL 0.9.6 l BlueCoat Systems Security Gateway OS 3.1.2 BlueCoat Systems Security Gateway OS 2.1.10 BlueCoat Systems CacheOS CA/SA 4.1.12
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-11 RT Session Fixation Vulnerability
2009-12-11 Multiple HP LaserJet Printers Unauthorized Access and Denial of Service Vulnerability
2009-12-11 Sun Ray Server Authentication Manager Remote Code Execution Vulnerability
2009-12-10 GNU Coreutils Insecure Temporary File Creation Vulnerability
2009-12-10 WebKit SVG Animation Elements User After Free Remote Code Execution Vulnerability
2009-12-10 Moodle Multiple Vulnerabilities
2009-12-10 Linux Kernel KVM Large SMP Instruction Local Denial of Service Vulnerability
2009-12-09 Adobe Flash Player and AIR Data Injection Remote Code Execution Vulnerability
2009-12-09 Adobe Flash Player ActiveX Control Information Disclosure Vulnerability
2009-12-09 Adobe Flash Player and AIR Multiple Unspecified Remote Code Execution Vulnerabilities