Description

Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.

References

• APPLE-APPLE-SA-2006-11-28
• BID-20246
• BID-20247
• BID-20248
• BID-20249
• BID-22083
• BID-28276
• CERT-TA06-333A
• CERT-VN-247744
• CERT-VN-386964
• CERT-VN-547300
• CVE-2006-2937
• CVE-2006-2940
• CVE-2006-3738
• CVE-2006-4343
• DEBIAN-DSA-1185
• DEBIAN-DSA-1195
• NETBSD-NetBSD-SA2008-007
• OVAL-OVAL10207
• OVAL-OVAL10311
• OVAL-OVAL10560
• OVAL-OVAL4256
• OVAL-OVAL4356
• OVAL-OVAL9370
• REDHAT-RHSA-2006:0695
• REDHAT-RHSA-2008:0629
• SGI-20061001-01-P
• SUNPATCH-124521-05
• SUSE-SUSE-SA:2006:058
• XF-29228
• XF-29230
• XF-29237
• XF-29240

Solution

Related Vulnerabilities

• HP System Management Homepage - HPSBMA02250 (CVE-2006-2937): Linux and Windows, Remote Execution of Arbitrary Code and Denial of Service (DoS)
• OpenSSL SSL_get_shared_ciphers() buffer overflow (CVE-2006-3738)
• Gentoo Linux: CVE-2007-5269: VMware Player, Server, Workstation: Multiple vulnerabilities
• Sun Patch: SunOS 5.4: /dev/qec should protect against being opened directly
• OS X security update 2006-007 for OpenSSL (CVE-2006-4339)
• Gentoo Linux: CVE-2006-2937: OpenSSL: Multiple vulnerabilities
• VMware Workstation: Updated OpenSSL library to address various security vulnerabilities (VMSA-2008-0005) (CVE-2006-4339)
• HP System Management Homepage - HPSBMA02250 (CVE-2006-4339): Linux and Windows, Remote Execution of Arbitrary Code and Denial of Service (DoS)
• Oracle Linux: CVE-2006-2940: ELSA-2016-3558 - openssl security update
• ELSA-2009-0004 Important: Enterprise Linux openssl security update
• OS X security update 2006-007 for OpenSSL (CVE-2006-3738)
• RHSA-2007:0992: libpng security update
• VMware Player: Updated OpenSSL library to address various security vulnerabilities (VMSA-2008-0005) (CVE-2006-2937)
• VMware Player: DHCP denial of service vulnerability (VMSA-2008-0005) (CVE-2008-1364)
• VMware Player: Windows 2000 based hosted products privilege escalation vulnerability (VMSA-2008-0005) (CVE-2007-5618)
• VMware Player: Local Privilege Escalation on Windows based platforms by Hijacking VMware VMX configuration file (VMSA-2008-0005) (CVE-2008-1363)
• RHSA-2008:0629: Red Hat Network Satellite Server Solaris client security update
• VMware Player: Insecure named pipes (VMSA-2008-0005) (CVE-2008-1362)
• VMware Workstation: Insecure named pipes (VMSA-2008-0005) (CVE-2008-1362)
• FreeBSD: openoffice.org -- multiple vulnerabilities (Multiple CVEs)
• Sun Patch: SunOS 5.9: Kernel Patch
• SUSE-SA:2006:055: openssl,mozilla-nss RSA signature evasion
• Sun Patch: SunOS 5.10_x86: kernel patch
• F5 Networks: K6623 (CVE-2006-4339): OpenSSL signature vulnerability - CVE-2006-4339
• Sun Patch: StarOffice 8 (Solaris): Update 18
• FreeBSD: openssl -- Incorrect PKCS#1 v1.5 padding validation in crypto(3) (FreeBSD-SA-06:19.openssl) (CVE-2006-4339)
• OS X security update 2006-007 for OpenSSL (CVE-2006-2940)
• Apache HTTPD: Requests can cause directory listing to be displayed (CVE-2001-0729)
• Sun Patch: StarSuite 8 (Solaris): Update 18
• Sun Patch: StarSuite 8 (Solaris_x86): Update 18
• OS X security update 2008-002 for X11 (CVE-2007-5269)
• SUSE-SA:2006:061: opera
• SUSE Linux Security Vulnerability: CVE-2006-4343
• RHSA-2008:0525: Red Hat Network Satellite Server Solaris client security update
• Sun Patch: GNOME 2.0.0_x86: libpng Patch
• VMware Player: Virtual Machine Communication Interface (VMCI) memory corruption resulting in denial of service (VMSA-2008-0005) (CVE-2008-1340)
• HP System Management Homepage - HPSBMA02250 (CVE-2006-2940): Linux and Windows, Remote Execution of Arbitrary Code and Denial of Service (DoS)
• FreeBSD: png -- multiple vulnerabilities (Multiple CVEs)
• Oracle Linux: CVE-2006-3738: ELSA-2016-3558 - openssl security update
• Sun Patch: GNOME 2.0.2: 64bit libpng Patch
• Sun Patch: SunOS 5.9_x86: bootconfchk patch
• Oracle Linux: CVE-2006-4343: ELSA-2016-3558 - openssl security update
• Gentoo Linux: CVE-2008-1392: VMware Player, Server, Workstation: Multiple vulnerabilities
• RHSA-2006:0661: openssl security update
• VMware Workstation: Local Privilege Escalation on Windows based platforms by Hijacking VMware VMX configuration file (VMSA-2008-0005) (CVE-2008-1363)
• VMware Workstation: DHCP denial of service vulnerability (VMSA-2008-0005) (CVE-2008-1364)
• Apple Java security update for CVE-2006-4339
• OS X security update 2006-007 for OpenSSL (CVE-2006-2937)
• SUSE Linux Security Advisory: SUSE-SR:2006:026
• ELSA-2007-0992 Moderate: Enterprise Linux libpng security update
• OS X update for ImageIO (CVE-2007-5269)
• F5 Networks: K6734 (CVE-2006-2940): Local OpenSSL vulnerabilities VU#547300 and VU#386964, CAN-2006-3738, CAN-2006-2940, CAN-2006-2937, CAN-2006-4343
• FileZilla Server/OpenSSL Multiple Vulnerabilities
• Gentoo Linux: CVE-2006-4339: OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery
• Sun Patch: Web Server 6.1: Sun ONE Web Server 6.1 Patch WS61SP13
• Sun Patch: NSS_NSPR_JSS 3.35: NSPR 4.18 / NSS 3.35 / JSS 4.3.2
• VMware Player: Updated OpenSSL library to address various security vulnerabilities (VMSA-2008-0005) (CVE-2006-2940)
• FreeBSD: opera -- RSA Signature Forgery (CVE-2006-4339)
• Sun Patch: N1 Grid Engine 6.0: maintenance patch
• Sun Patch: SunOS 5.4: usr/bin/ps and usr/ucb/ps patch
• CESA-2007:0072: IBMJava2 security update
• VMware Workstation: Updated OpenSSL library to address various security vulnerabilities (VMSA-2008-0005) (CVE-2006-2940)
• Sun Patch: Security 3.3.4.8: NSPR 4.1.6 / NSS 3.3.4.8
• Sun Patch: SunOS 5.10: kernel patch
• Sun Patch: SunOS 5.10_x86: libpng Patch
• RHSA-2007:0062: java-1.4.2-ibm security update
• HP System Management Homepage - HPSBMA02250 (CVE-2006-3738): Linux and Windows, Remote Execution of Arbitrary Code and Denial of Service (DoS)
• Gentoo Linux: CVE-2008-1361: VMware Player, Server, Workstation: Multiple vulnerabilities
• VMware Workstation: Updated libpng library to version 1.2.22 to address various security vulnerabilities (VMSA-2008-0005) (CVE-2007-5269)
• Oracle DBMS_CAPTURE_ADM_INTERNAL Buffer Overflow
• HP System Management Homepage - HPSBMA02250 (CVE-2006-4343): Linux and Windows, Remote Execution of Arbitrary Code and Denial of Service (DoS)
• Sun Patch: SunOS 5.9: bootconfchk patch
• Sun Patch: NSS_NSPR_JSS 3.30.2_x86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2
• SUSE-SR:2006:024:vuln2: openssl: remote denial of service
• SUSE-SA:2006:058: openssl security problems
• Sun Patch: GNOME 2.0.2_x86: libpng Patch
• Sun Patch: SunOS 5.9: pkg utilities Patch
• RHSA-2007:0072: IBMJava2 security update
• Sun Patch: NSS_NSPR_JSS 3.35: NSPR 4.18 / NSS 3.35 / JSS 4.3.2
• VMware Workstation: Windows 2000 based hosted products privilege escalation vulnerability (VMSA-2008-0005) (CVE-2007-5618)
• VMware Player: Updated OpenSSL library to address various security vulnerabilities (VMSA-2008-0005) (CVE-2006-4343)
• F5 Networks: K6734 (CVE-2006-3738): Local OpenSSL vulnerabilities VU#547300 and VU#386964, CAN-2006-3738, CAN-2006-2940, CAN-2006-2937, CAN-2006-4343
• Sun Patch: SunOS 5.9_x86: pkg utilities Patch
• MFSA2006-60 Firefox: RSA Signature Forgery (CVE-2006-4339)
• SUSE Linux Security Vulnerability: CVE-2006-4339
• RHSA-2007:0073: java-1.5.0-ibm security update
• OpenSSL get_server_hello() null pointer dereference denial of service (CVE-2006-4343)
• Oracle Linux: CVE-2006-2937: ELSA-2016-3558 - openssl security update
• VMware Player: Host to guest shared folder (HGFS) traversal vulnerability (VMSA-2008-0005) (CVE-2008-0923)
• VMware Fusion: DHCP denial of service vulnerability (VMSA-2008-0005) (CVE-2008-1364)
• SUSE Linux Security Vulnerability: CVE-2006-3738
• Gentoo Linux: CVE-2008-1363: VMware Player, Server, Workstation: Multiple vulnerabilities
• Sun Patch: SunOS 5.9_x86: wanboot and pkg utilities Patch
• CESA-2007:0992: libpng security update
• Missing Oracle Critical Patch Update (CPU) for January 2007
• Sun Patch: SunOS 5.10: libpng Patch
• USN-730-1: libpng vulnerabilities
• Sun Patch: SunOS 5.4_x86: /usr/lib/nfs/mountd patch
• Gentoo Linux: CVE-2008-1362: VMware Player, Server, Workstation: Multiple vulnerabilities
• Sun Patch: SunOS 5.10: kernel patch