29262 : OpenSSL SSL_get_shared_ciphers Function Unspecified Remote Overflow
Printer | http://osvdb.org/29262 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
21	1445	over 5 years ago	2 months ago	7 times	90%

Timeline

Disclosure Date
2006-09-28

Keywords

HPSBMA02250, SSRT061275, HPSBUX02292, SSRT071499 HPSBMA02250, SSRT061275, c01290398

Description

A remote overflow exists in OpenSSL. OpenSSL contains an unspecified issue in the SSL_get_shared_ciphers function. With a specially crafted request, an attacker can cause an unspecified impact.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified

Technical

The error is in SSL_get_shared_ciphers() function.

Solution

Upgrade to version 0.9.7l, 0.9.8d or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

The OpenSSL Project	OpenSSL	0.9.7
		0.9.8

CyberGuard Corporation

SnapGear

3.1.4u1

References

Tools & Filters

	22467 22472 22727 22881 22914 23863 24028 24558 25637 26209 26946 26950 27052 27061 27328 27563 27777 27933 28127 28243 29544 31392 40381
	3755 4221
Snort	8426 8427 8428 8429 8430 8431 8432 8433 8434 8435 8436 8437 8438 8439 8440

Credit

Will Drewry - wadgoogle.com - Google Security Team
Tavis Ormandy - tavisogoogle.com - Google Information Security Team

CVSSv2 Score

CVSSv2 Base Score = 6.8
Source: nvd.nist.gov | Generated: 2007-09-28 | Disagree? | There are 1 more: View All

Blogs

This product uses the Daylife API but is not endorsed or certified by Daylife.

This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.

None found at this time

Comments

Add Comment Hide Add Comment

Anonymous - 2011/11/21 14:23:47

For CVE-2007-5135, upgrade to 0.9.7m or 0.9.8e.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.