CVE-2006-4343

Опубликовано: 28 сент. 2006

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.

Ссылки

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc
Third Party Advisory
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
Third Party Advisory
http://docs.info.apple.com/article.html?artnum=304829
Third Party Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
Broken Link
http://issues.rpath.com/browse/RPL-613
Broken Link
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
Broken Link
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
Broken Link
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
Broken Link
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
Broken Link
http://kolab.org/security/kolab-vendor-notice-11.txt
Broken Link
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
Mailing List
Third Party Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html
Mailing List
Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2008/000008.html
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2
Mailing List
Third Party Advisory
http://openbsd.org/errata.html#openssl2
Third Party Advisory
http://openvpn.net/changelog.html
Third Party Advisory
http://secunia.com/advisories/22094
Third Party Advisory
http://secunia.com/advisories/22116
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

EPSS

Процентиль: 92%

0.07849

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2006-4343

ubuntu

около 19 лет назад

CVE-2006-4343

redhat

около 19 лет назад

CVE-2006-4343

debian

около 19 лет назад

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9. ...

GHSA-vrm9-vqv5-39gr

github

больше 3 лет назад

BDU:2015-09525

fstec

около 19 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 92%

0.07849

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-476