9.3 - VU#737740

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	Fiery EXP260 2.0 print controllers use a vulnerable version of OpenSSL

Informations
Name	VU#737740	First vendor Publication	2013-03-18
Vendor	VU-CERT	Last vendor Modification	2013-03-19
Severity (Vendor)	N/A	Revision	M

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability Note VU#737740

Fiery EXP260 2.0 print controllers use a vulnerable version of OpenSSL

Original Release date: 18 Mar 2013 | Last revised: 19 Mar 2013

Overview

Fiery EXP260 2.0 print controllers used in Xerox DocuColor 242-252-262 printers use a vulnerable version of OpenSSL (0.9.8o).

Description

Xerox DocuColor 242-252-262 printers are known to use the Fiery EXP260 2.0 print controller. The Fiery EXP260 2.0 print controller uses OpenSSL for SSL/TLS encryption. The version of OpenSSL that comes with the Fiery EXP260 2.0 print controller is 0.9.8o that is out of date and known to be vulnerable.

Impact

A remote attacker may be able to cause a denial of service or possibly run arbitrary code.

Solution

Apply an Update

Apply patch 1-1IJ6ZK. The patch will upgrade OpenSSL to version 0.9.8x. Patch 1-1IJ6ZK can be obtained from Xerox tech support.

Restrict access

As a general good security practice, only allow connections from trusted hosts and networks.

Vendor Information (Learn More)

Vendor	Status	Date Notified	Date Updated
EFI	Affected	18 Dec 2012	18 Mar 2013

If you are a vendor and your product is affected, let us know.

CVSS Metrics (Learn More)

Group	Score	Vector
Base	6.9	AV:A/AC:M/Au:N/C:P/I:P/A:C
Temporal	5.1	E:U/RL:OF/RC:C
Environmental	1.0	CDP:L/TD:L/CR:L/IR:L/AR:L

References

http://www.support.xerox.com/support/docucolor-242-252-260/downloads/enus.html?associatedProduct=fiery-exp260&operatingSystem=win7x64
https://www.openssl.org/news/vulnerabilities.html
http://w3.efi.com/Fiery

Credit

Thanks to Curtis Rhodes for reporting this vulnerability.

This document was written by Jared Allar.

Other Information

CVE IDs:CVE-2013-0169CVE-2013-0166CVE-2012-2333CVE-2012-0884CVE-2011-4619CVE-2011-4577CVE-2011-4576CVE-2011-4109CVE-2011-4108CVE-2010-4180CVE-2010-3864
Date Public:18 Mar 2013
Date First Published:18 Mar 2013
Date Last Updated:19 Mar 2013
Document Revision:25

Feedback

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Original Source

Url : http://www.kb.cert.org/vuls/id/737740

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-310	Cryptographic Issues
30 %	CWE-399	Resource Management Errors
10 %	CWE-362	Race Condition
10 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12481

Oval ID:	oval:org.mitre.oval:def:12481
Title:	DSA-2141-4 lighttpd -- compatibility problem with updated openssl
Description:	The openssl update in DSA-2141-1 caused a regression in lighttpd. Due to a bug in lighttpd, the server fails to start in some configurations if using the updated openssl libraries. This update fixes this problem.
Family:	unix	Class:	patch
Reference(s):	DSA-2141-4 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	lighttpd
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND lighttpd DPKG is earlier than 1.4.19-5+lenny2

Definition Id: oval:org.mitre.oval:def:12573

Oval ID:	oval:org.mitre.oval:def:12573
Title:	DSA-2141-3 apache2 -- backward compatibility option for SSL/TLS insecure
Description:	DSA-2141-1 changed the behaviour of the openssl libraries in a server environment to only allow SSL/TLS renegotiation for clients that support the RFC5746 renegotiation extension. This update to apache2 adds the new SSLInsecureRenegotiation configuration option that allows to restore support for insecure clients. More information can be found in the file /usr/share/doc/apache2.2-common/NEWS.Debian.gz .
Family:	unix	Class:	patch
Reference(s):	DSA-2141-3 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	apache2
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.9-10+lenny9

Definition Id: oval:org.mitre.oval:def:12598

Oval ID:	oval:org.mitre.oval:def:12598
Title:	DSA-2125-1 openssl -- buffer overflow
Description:	A flaw has been found in the OpenSSL TLS server extension code parsing which on affected servers can be exploited in a buffer overrun attack. This allows an attacker to cause an appliation crash or potentially to execute arbitrary code. However, not all OpenSSL based SSL/TLS servers are vulnerable: A server is vulnerable if it is multi-threaded and uses OpenSSL's internal caching mechanism. In particular the Apache HTTP server and Stunnel are NOT affected. This upgrade fixes this issue. After the upgrade, any services using the openssl libraries need to be restarted. The checkrestart script from the debian-goodies package or lsof can help to find out which services need to be restarted. A note to users of the tor packages from the Debian backports or Debian volatile: This openssl update causes problems with some versions of tor. You need to update to tor 0.2.1.26-4~bpo50+1 or 0.2.1.26-1~lennyvolatile2, respectively. The tor package version 0.2.0.35-1~lenny2 from Debian stable is not affected by these problems. For the stable distribution, the problem has been fixed in openssl version 0.9.8g-15+lenny9. For the testing distribution and the unstable distribution, this problem has been fixed in version 0.9.8o-3. We recommend that you upgrade your openssl packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2125-1 CVE-2010-3864	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	openssl
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa Packages section libssl-dev DPKG is earlier than 0.9.8g-15+lenny9 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-15+lenny9 AND openssl DPKG is earlier than 0.9.8g-15+lenny9 AND libssl0.9.8 DPKG is earlier than 0.9.8g-15+lenny9

Definition Id: oval:org.mitre.oval:def:12707

Oval ID:	oval:org.mitre.oval:def:12707
Title:	DSA-2141-1 openssl -- SSL/TLS insecure renegotiation protocol design flaw
Description:	CVE-2009-3555: Marsh Ray, Steve Dispensa, and Martin Rex discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user's session. This update adds backported support for the new RFC5746 renegotiation extension which fixes this issue. If openssl is used in a server application, it will by default no longer accept renegotiation from clients that do not support the RFC5746 secure renegotiation extension. A separate advisory will add RFC5746 support for nss, the security library used by the iceweasel web browser. For apache2, there will be an update which allows to re-enable insecure renegotiation. This version of openssl is not compatible with older versions of tor. You have to use at least tor version 0.2.1.26-1~lenny+1, which has been included in the point release 5.0.7 of Debian stable. Currently we are not aware of other software with similar compatibility problems. CVE-2010-4180: In addition, this update fixes a flaw that allowed a client to bypass restrictions configured in the server for the used cipher suite.
Family:	unix	Class:	patch
Reference(s):	DSA-2141-1 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	openssl
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8g-15+lenny11

Definition Id: oval:org.mitre.oval:def:12801

Oval ID:	oval:org.mitre.oval:def:12801
Title:	DSA-2141-2 nss -- SSL/TLS insecure renegotiation protocol design flaw
Description:	CVE-2009-3555: Marsh Ray, Steve Dispensa, and Martin Rex discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user's session. This update adds backported support for the new RFC5746 renegotiation extension which fixes this issue. The updated libraries allow to use shell environment variables to configure if insecure renegotiation is still allowed. The syntax of these environment variables is described in the release notes to version 3.12.6 of nss: https://developer.mozilla.org/NSS_3.12.6_release_notes However, the default behaviour for nss in Debian 5.0 is NSS_SSL_ENABLE_RENEGOTIATION=3, which allows clients to continue to renegotiate with vulnerable servers.
Family:	unix	Class:	patch
Reference(s):	DSA-2141-2 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	nss
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND nss DPKG is earlier than 3.12.3.1-0lenny3

Definition Id: oval:org.mitre.oval:def:13383

Oval ID:	oval:org.mitre.oval:def:13383
Title:	USN-1018-1 -- openssl vulnerability
Description:	Rob Hulswit discovered a race condition in the OpenSSL TLS server extension parsing code when used within a threaded server. A remote attacker could trigger this flaw to cause a denial of service or possibly execute arbitrary code with application privileges
Family:	unix	Class:	patch
Reference(s):	USN-1018-1 CVE-2010-3864	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.10 Ubuntu 9.10 Ubuntu 10.04	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-4ubuntu3.12 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-4ubuntu3.12 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-4ubuntu3.12 AND libssl0.9.8 DPKG is earlier than 0.9.8g-4ubuntu3.12 AND libssl-dev DPKG is earlier than 0.9.8g-4ubuntu3.12 AND openssl DPKG is earlier than 0.9.8g-4ubuntu3.12 OR Release section Ubuntu 10.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8o-1ubuntu4.2 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is armel AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libssl-dev DPKG is earlier than 0.9.8o-1ubuntu4.2 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8o-1ubuntu4.2 AND openssl DPKG is earlier than 0.9.8o-1ubuntu4.2 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8o-1ubuntu4.2 AND libssl0.9.8 DPKG is earlier than 0.9.8o-1ubuntu4.2 AND libssl0.9.8-udeb DPKG is earlier than 0.9.8o-1ubuntu4.2 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-16ubuntu3.4 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is lpia AND Packages section openssl DPKG is earlier than 0.9.8g-16ubuntu3.4 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-16ubuntu3.4 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-16ubuntu3.4 AND libssl0.9.8 DPKG is earlier than 0.9.8g-16ubuntu3.4 AND libssl-dev DPKG is earlier than 0.9.8g-16ubuntu3.4 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8k-7ubuntu8.4 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is armel AND Packages section libssl-dev DPKG is earlier than 0.9.8k-7ubuntu8.4 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8k-7ubuntu8.4 AND openssl DPKG is earlier than 0.9.8k-7ubuntu8.4 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.4 AND libssl0.9.8 DPKG is earlier than 0.9.8k-7ubuntu8.4 AND libssl0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.4

Definition Id: oval:org.mitre.oval:def:15286

Oval ID:	oval:org.mitre.oval:def:15286
Title:	DSA-2390-1 openssl -- several
Description:	Several vulnerabilities were discovered in OpenSSL, an implementation of TLS and related protocols. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2011-4108 The DTLS implementation performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack. CVE-2011-4109 A double free vulnerability when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to cause applications crashes and potentially allow execution of arbitrary code by triggering failure of a policy check. CVE-2011-4354 On 32-bit systems, the operations on NIST elliptic curves P-256 and P-384 are not correctly implemented, potentially leaking the private ECC key of a TLS server. CVE-2011-4576 The SSL 3.0 implementation does not properly initialise data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer. CVE-2011-4619 The Server Gated Cryptography implementation in OpenSSL does not properly handle handshake restarts, unnecessarily simplifying CPU exhaustion attacks.
Family:	unix	Class:	patch
Reference(s):	DSA-2390-1 CVE-2011-4108 CVE-2011-4109 CVE-2011-4354 CVE-2011-4576 CVE-2011-4619	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8g-15+lenny15 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8o-4squeeze5

Definition Id: oval:org.mitre.oval:def:17579

Oval ID:	oval:org.mitre.oval:def:17579
Title:	USN-1451-1 -- openssl vulnerabilities
Description:	Applications using OpenSSL in certain situations could be made to crash or expose sensitive information.
Family:	unix	Class:	patch
Reference(s):	USN-1451-1 CVE-2012-0884 CVE-2012-2333	Version:	7
Platform(s):	Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 12.04 is installed Packages match section libssl1.0.0 DPKG is earlier than 1.0.1-4ubuntu5.2 AND openssl DPKG is earlier than 1.0.1-4ubuntu5.2 AND Release section Ubuntu 11.10 is installed Packages match section libssl1.0.0 DPKG is earlier than 1.0.0e-2ubuntu4.6 AND openssl DPKG is earlier than 1.0.0e-2ubuntu4.6 AND Release section Ubuntu 11.04 is installed Packages match section libssl0.9.8 DPKG is earlier than 0.9.8o-5ubuntu1.7 AND openssl DPKG is earlier than 0.9.8o-5ubuntu1.7 AND Release section Ubuntu 10.04 is installed Packages match section libssl0.9.8 DPKG is earlier than 0.9.8k-7ubuntu8.13 AND openssl DPKG is earlier than 0.9.8k-7ubuntu8.13 AND Release section Ubuntu 8.04 is installed Packages match section libssl0.9.8 DPKG is earlier than 0.9.8g-4ubuntu3.19 AND openssl DPKG is earlier than 0.9.8g-4ubuntu3.19

Definition Id: oval:org.mitre.oval:def:17865

Oval ID:	oval:org.mitre.oval:def:17865
Title:	DSA-2475-1 openssl - integer underflow
Description:	It was discovered that openssl did not correctly handle explicit Initialization Vectors for CBC encryption modes, as used in TLS 1.1, 1.2, and DTLS. An incorrect calculation would lead to an integer underflow and incorrect memory access, causing denial of service (application crash.)
Family:	unix	Class:	patch
Reference(s):	DSA-2475-1 CVE-2012-2333	Version:	7
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openssl DPKG is earlier than 0.9.8o-4squeeze13

Definition Id: oval:org.mitre.oval:def:18001

Oval ID:	oval:org.mitre.oval:def:18001
Title:	DSA-2454-1 openssl - multiple
Description:	Multiple vulnerabilities have been found in OpenSSL.
Family:	unix	Class:	patch
Reference(s):	DSA-2454-1 CVE-2012-0884 CVE-2012-1165 CVE-2012-2110 CVE-2012-2131 CVE-2011-4619	Version:	7
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openssl DPKG is earlier than 0.9.8o-4squeeze11

Definition Id: oval:org.mitre.oval:def:18302

Oval ID:	oval:org.mitre.oval:def:18302
Title:	USN-1732-1 -- openssl vulnerabilities
Description:	Several security issues were fixed in OpenSSL.
Family:	unix	Class:	patch
Reference(s):	USN-1732-1 CVE-2012-2686 CVE-2013-0166 CVE-2013-0169	Version:	7
Platform(s):	Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 12.10 is installed AND libssl1.0.0 DPKG is earlier than 1.0.1c-3ubuntu2.1 AND Release section Ubuntu 12.04 is installed AND libssl1.0.0 DPKG is earlier than 1.0.1-4ubuntu5.6 AND Release section Ubuntu 11.10 is installed AND libssl1.0.0 DPKG is earlier than 1.0.0e-2ubuntu4.7 AND Release section Ubuntu 10.04 is installed AND libssl0.9.8 DPKG is earlier than 0.9.8k-7ubuntu8.14 AND Release section Ubuntu 8.04 is installed AND libssl0.9.8 DPKG is earlier than 0.9.8g-4ubuntu3.20

Definition Id: oval:org.mitre.oval:def:18565

Oval ID:	oval:org.mitre.oval:def:18565
Title:	DSA-2621-1 openssl - several vulnerabilities
Description:	Multiple vulnerabilities have been found in OpenSSL.
Family:	unix	Class:	patch
Reference(s):	DSA-2621-1 CVE-2013-0166 CVE-2013-0169	Version:	7
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openssl DPKG is earlier than 0.9.8o-4squeeze14

Definition Id: oval:org.mitre.oval:def:18754

Oval ID:	oval:org.mitre.oval:def:18754
Title:	HP-UX Apache Web Server, Remote Denial of Service (DoS)
Description:	OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0166	Version:	6
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
HP Release B.11.11 AND filesets test hpuxwsAPACHE.APACHE version is less than B.2.0.64.05 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.05 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.05 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.05 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.05 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.05

Definition Id: oval:org.mitre.oval:def:18841

Oval ID:	oval:org.mitre.oval:def:18841
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Unauthorized Disclosure
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0169	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02856 HP Release B.11.11 AND filesets test openssl.OPENSSL-CER version is less than A.00.09.08y.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08y.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08y.001 AND openssl.OPENSSL-INC version is less than A.00.09.08y.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08y.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08y.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08y.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08y.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08y.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08y.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08y.001 OR Criteria meets HP Security Bulletin HPSBUX02856 HP Release B.11.23 AND filesets test openssl.OPENSSL-CER version is less than A.00.09.08y.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08y.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08y.002 AND openssl.OPENSSL-INC version is less than A.00.09.08y.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08y.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08y.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08y.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08y.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08y.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08y.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08y.002 OR Criteria meets HP Security Bulletin HPSBUX02856 HP-UX B.11.31 AND filesets test openssl.OPENSSL-CER version is less than A.00.09.08y.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08y.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08y.003 AND openssl.OPENSSL-INC version is less than A.00.09.08y.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08y.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08y.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08y.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08y.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08y.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08y.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08y.003

Definition Id: oval:org.mitre.oval:def:18910

Oval ID:	oval:org.mitre.oval:def:18910
Title:	OpenSSL vulnerability before 0.9.8q, and 1.0.x before 1.0.0c in VisualSVN Server (CVE-2010-4180)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	5
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	VisualSVN Server
Definition Synopsis:
VisualSVN Server is installed If the version of OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c in VisualSVN Server Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.8.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.8.16 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.7.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.7.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.6.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 1.0.0.0 in VisualSVN Server AND Check if OpenSSL is less than 1.0.0.3 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.1.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.2.2 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.4.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.1 in VisualSVN Server

Definition Id: oval:org.mitre.oval:def:19016

Oval ID:	oval:org.mitre.oval:def:19016
Title:	OpenSSL vulnerability before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d in VisualSVN Server (CVE-2013-0169)
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0169	Version:	6
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	VisualSVN Server
Definition Synopsis:
VisualSVN Server is installed If the version of OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d in VisualSVN Server Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.8.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.8.24 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 1.0.0.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 1.0.0.10 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 1.0.1.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 1.0.1.3 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.1.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.2.2 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.4.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.1 in VisualSVN Server

Definition Id: oval:org.mitre.oval:def:19081

Oval ID:	oval:org.mitre.oval:def:19081
Title:	OpenSSL vulnerability before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d in VisualSVN Server (CVE-2013-0166)
Description:	OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0166	Version:	6
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	VisualSVN Server
Definition Synopsis:
VisualSVN Server is installed If the version of OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d in VisualSVN Server Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.8.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.8.24 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.7.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.7.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.6.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 1.0.0.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 1.0.0.10 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 1.0.1.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 1.0.1.3 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.1.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.2.2 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.4.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.1 in VisualSVN Server

Definition Id: oval:org.mitre.oval:def:19156

Oval ID:	oval:org.mitre.oval:def:19156
Title:	HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, Denial of Service (DoS), Authentication Bypass
Description:	Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-3864	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.001 AND openssl.OPENSSL-INC version is less than A.00.09.08q.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.001 OR Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.002 AND openssl.OPENSSL-INC version is less than A.00.09.08q.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.002 OR Criteria meets HP Security Bulletin HPSBUX02638 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.003 AND openssl.OPENSSL-INC version is less than A.00.09.08q.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.003

Definition Id: oval:org.mitre.oval:def:19279

Oval ID:	oval:org.mitre.oval:def:19279
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4576	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19360

Oval ID:	oval:org.mitre.oval:def:19360
Title:	Multiple OpenSSL vulnerabilities
Description:	OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0166	Version:	5
Platform(s):	IBM AIX 5.3 IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
Criteria meets IBM AIX Security Advisory OS check IBM AIX 5.3 is installed AND openssl.base less than or equal to 0.9.8.2400 OR OS check IBM AIX 6.1 is installed AND openssl.base less than or equal to 0.9.8.2400 OR OS check IBM AIX 7.1 is installed AND openssl.base less than or equal to 0.9.8.2400 OR Criteria meets IBM AIX Security Advisory OS check IBM AIX 5.3 is installed AND openssl-fips.base less than or equal to 12.9.8.2400 OR OS check IBM AIX 6.1 is installed AND openssl-fips.base less than or equal to 12.9.8.2400 OR OS check IBM AIX 7.1 is installed AND openssl-fips.base less than or equal to 12.9.8.2400

Definition Id: oval:org.mitre.oval:def:19424

Oval ID:	oval:org.mitre.oval:def:19424
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0169	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.05.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.05.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.05.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.05.00 AND Jre70.JRE70-COM version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.05.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.05.00

Definition Id: oval:org.mitre.oval:def:19428

Oval ID:	oval:org.mitre.oval:def:19428
Title:	HP-UX Apache Web Server, Remote Denial of Service (DoS)
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0169	Version:	7
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
HP Release B.11.11 AND filesets test hpuxwsAPACHE.APACHE version is less than B.2.0.64.05 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.05 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.05 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.05 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.05 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.05 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.05

Definition Id: oval:org.mitre.oval:def:19487

Oval ID:	oval:org.mitre.oval:def:19487
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Unauthorized Disclosure
Description:	OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0166	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02856 HP Release B.11.11 AND filesets test openssl.OPENSSL-CER version is less than A.00.09.08y.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08y.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08y.001 AND openssl.OPENSSL-INC version is less than A.00.09.08y.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08y.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08y.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08y.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08y.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08y.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08y.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08y.001 OR Criteria meets HP Security Bulletin HPSBUX02856 HP Release B.11.23 AND filesets test openssl.OPENSSL-CER version is less than A.00.09.08y.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08y.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08y.002 AND openssl.OPENSSL-INC version is less than A.00.09.08y.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08y.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08y.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08y.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08y.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08y.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08y.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08y.002 OR Criteria meets HP Security Bulletin HPSBUX02856 HP-UX B.11.31 AND filesets test openssl.OPENSSL-CER version is less than A.00.09.08y.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08y.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08y.003 AND openssl.OPENSSL-INC version is less than A.00.09.08y.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08y.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08y.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08y.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08y.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08y.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08y.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08y.003

Definition Id: oval:org.mitre.oval:def:19540

Oval ID:	oval:org.mitre.oval:def:19540
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0169	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02867 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.28.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.28.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.28.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.28.00 AND Jre15.JRE15-COM version is less than 1.5.0.28.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.28.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.28.00 OR Criteria meets HP Security Bulletin HPSBUX02867 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.28.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.28.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.28.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.28.00 AND Jre15.JRE15-COM version is less than 1.5.0.28.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.28.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.28.00

Definition Id: oval:org.mitre.oval:def:19547

Oval ID:	oval:org.mitre.oval:def:19547
Title:	HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, Denial of Service (DoS), Authentication Bypass
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.001 AND openssl.OPENSSL-INC version is less than A.00.09.08q.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.001 OR Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.002 AND openssl.OPENSSL-INC version is less than A.00.09.08q.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.002 OR Criteria meets HP Security Bulletin HPSBUX02638 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.003 AND openssl.OPENSSL-INC version is less than A.00.09.08q.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.003

Definition Id: oval:org.mitre.oval:def:19608

Oval ID:	oval:org.mitre.oval:def:19608
Title:	Multiple OpenSSL vulnerabilities
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0169	Version:	5
Platform(s):	IBM AIX 5.3 IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
Criteria meets IBM AIX Security Advisory OS check IBM AIX 5.3 is installed AND openssl.base less than or equal to 0.9.8.2400 OR OS check IBM AIX 6.1 is installed AND openssl.base less than or equal to 0.9.8.2400 OR OS check IBM AIX 7.1 is installed AND openssl.base less than or equal to 0.9.8.2400 OR Criteria meets IBM AIX Security Advisory OS check IBM AIX 5.3 is installed AND openssl-fips.base less than or equal to 12.9.8.2400 OR OS check IBM AIX 6.1 is installed AND openssl-fips.base less than or equal to 12.9.8.2400 OR OS check IBM AIX 7.1 is installed AND openssl-fips.base less than or equal to 12.9.8.2400

Definition Id: oval:org.mitre.oval:def:19623

Oval ID:	oval:org.mitre.oval:def:19623
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS)
Description:	Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-2333	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02814 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08x.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08x.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08x.001 AND openssl.OPENSSL-INC version is less than A.00.09.08x.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08x.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08x.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08x.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08x.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08x.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08x.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08x.001 OR Criteria meets HP Security Bulletin HPSBUX02814 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08x.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08x.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08x.002 AND openssl.OPENSSL-INC version is less than A.00.09.08x.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08x.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08x.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08x.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08x.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08x.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08x.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08x.002 OR Criteria meets HP Security Bulletin HPSBUX02814 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08x.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08x.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08x.003 AND openssl.OPENSSL-INC version is less than A.00.09.08x.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08x.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08x.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08x.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08x.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08x.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08x.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08x.003

Definition Id: oval:org.mitre.oval:def:19733

Oval ID:	oval:org.mitre.oval:def:19733
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4109	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19737

Oval ID:	oval:org.mitre.oval:def:19737
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4577	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19752

Oval ID:	oval:org.mitre.oval:def:19752
Title:	VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201110204-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201110204-SG is not installed OR Patch ESX400-201203401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201203401-SG is not installed

Definition Id: oval:org.mitre.oval:def:19793

Oval ID:	oval:org.mitre.oval:def:19793
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS)
Description:	The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0884	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02782 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08w.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08w.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08w.001 AND openssl.OPENSSL-INC version is less than A.00.09.08w.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08w.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08w.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08w.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08w.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08w.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08w.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08w.001 OR Criteria meets HP Security Bulletin HPSBUX02782 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08w.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08w.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08w.002 AND openssl.OPENSSL-INC version is less than A.00.09.08w.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08w.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08w.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08w.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08w.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08w.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08w.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08w.002 OR Criteria meets HP Security Bulletin HPSBUX02782 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08w.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08w.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08w.003 AND openssl.OPENSSL-INC version is less than A.00.09.08w.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08w.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08w.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08w.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08w.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08w.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08w.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08w.003

Definition Id: oval:org.mitre.oval:def:19801

Oval ID:	oval:org.mitre.oval:def:19801
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4108	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19820

Oval ID:	oval:org.mitre.oval:def:19820
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4619	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19936

Oval ID:	oval:org.mitre.oval:def:19936
Title:	DSA-2454-2 openssl - incomplete fix
Description:	Multiple vulnerabilities have been found in OpenSSL.
Family:	unix	Class:	patch
Reference(s):	DSA-2454-2 CVE-2012-0884 CVE-2012-1165 CVE-2012-2110 CVE-2012-2131 CVE-2011-4619	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openssl DPKG is earlier than 0:0.9.8o-4squeeze12

Definition Id: oval:org.mitre.oval:def:20227

Oval ID:	oval:org.mitre.oval:def:20227
Title:	Multiple OpenSSL vulnerabilities
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4619	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than or equal 0.9.8.1800 AND OpenSSL-fips.base less than or equal 12.9.8.1800

Definition Id: oval:org.mitre.oval:def:20390

Oval ID:	oval:org.mitre.oval:def:20390
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4576	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20409

Oval ID:	oval:org.mitre.oval:def:20409
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4108	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20422

Oval ID:	oval:org.mitre.oval:def:20422
Title:	Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Description:	Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-3864	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201101201-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201101201-SG is not installed OR Patch ESX400-201103401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201103401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20495

Oval ID:	oval:org.mitre.oval:def:20495
Title:	Multiple OpenSSL vulnerabilities
Description:	The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4108	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than or equal 0.9.8.1800 AND OpenSSL-fips.base less than or equal 12.9.8.1800

Definition Id: oval:org.mitre.oval:def:20511

Oval ID:	oval:org.mitre.oval:def:20511
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4109	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20667

Oval ID:	oval:org.mitre.oval:def:20667
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4577	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20685

Oval ID:	oval:org.mitre.oval:def:20685
Title:	Multiple OpenSSL vulnerabilities
Description:	Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-3864	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than 0.9.8.1301 AND OpenSSL-fips.base less than 12.9.8.1301

Definition Id: oval:org.mitre.oval:def:20686

Oval ID:	oval:org.mitre.oval:def:20686
Title:	VMware vSphere, ESX and ESXi updates to third party libraries
Description:	OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0166	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201307403-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201307403-SG is not installed OR Patch ESX400-201310401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201310401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20705

Oval ID:	oval:org.mitre.oval:def:20705
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20725

Oval ID:	oval:org.mitre.oval:def:20725
Title:	Multiple OpenSSL vulnerabilities
Description:	Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-2333	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
IBM AIX 6.1 is installed AND filesets openssl.base less than or equal 0.9.8.1801 AND OpenSSL-fips.base less than or equal 12.9.8.1801

Definition Id: oval:org.mitre.oval:def:20753

Oval ID:	oval:org.mitre.oval:def:20753
Title:	Multiple OpenSSL vulnerabilities
Description:	The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0884	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
IBM AIX 6.1 is installed AND filesets openssl.base less than or equal 0.9.8.1801 AND OpenSSL-fips.base less than or equal 12.9.8.1801

Definition Id: oval:org.mitre.oval:def:20756

Oval ID:	oval:org.mitre.oval:def:20756
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4619	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20786

Oval ID:	oval:org.mitre.oval:def:20786
Title:	VMware vSphere, ESX and ESXi updates to third party libraries
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0169	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201307403-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201307403-SG is not installed OR Patch ESX400-201310401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201310401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20817

Oval ID:	oval:org.mitre.oval:def:20817
Title:	Multiple OpenSSL vulnerabilities
Description:	Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4109	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than or equal 0.9.8.1800 AND OpenSSL-fips.base less than or equal 12.9.8.1800

Definition Id: oval:org.mitre.oval:def:20828

Oval ID:	oval:org.mitre.oval:def:20828
Title:	Multiple OpenSSL vulnerabilities
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than 0.9.8.1301 AND OpenSSL-fips.base less than 12.9.8.1301

Definition Id: oval:org.mitre.oval:def:20887

Oval ID:	oval:org.mitre.oval:def:20887
Title:	Multiple OpenSSL vulnerabilities
Description:	The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4576	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than or equal 0.9.8.1800 AND OpenSSL-fips.base less than or equal 12.9.8.1800

Definition Id: oval:org.mitre.oval:def:21079

Oval ID:	oval:org.mitre.oval:def:21079
Title:	RHSA-2013:0587: openssl security update (Moderate)
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0587-01 CESA-2013:0587 CVE-2012-4929 CVE-2013-0166 CVE-2013-0169	Version:	45
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	openssl
Definition Synopsis:
Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section openssl-devel is earlier than 0:1.0.0-27.el6_4.2 AND openssl-static is earlier than 0:1.0.0-27.el6_4.2 AND openssl-perl is earlier than 0:1.0.0-27.el6_4.2 AND openssl is earlier than 0:1.0.0-27.el6_4.2 AND Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section openssl-devel is earlier than 0:0.9.8e-26.el5_9.1 AND openssl-perl is earlier than 0:0.9.8e-26.el5_9.1 AND openssl is earlier than 0:0.9.8e-26.el5_9.1

Definition Id: oval:org.mitre.oval:def:21192

Oval ID:	oval:org.mitre.oval:def:21192
Title:	RHSA-2012:0059: openssl security update (Moderate)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0059-01 CESA-2012:0059 CVE-2011-4108 CVE-2011-4576 CVE-2011-4577 CVE-2011-4619	Version:	55
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	openssl
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section openssl-devel is earlier than 0:1.0.0-20.el6_2.1 AND openssl-static is earlier than 0:1.0.0-20.el6_2.1 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.1 AND openssl is earlier than 0:1.0.0-20.el6_2.1

Definition Id: oval:org.mitre.oval:def:21363

Oval ID:	oval:org.mitre.oval:def:21363
Title:	RHSA-2012:0060: openssl security update (Moderate)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0060-01 CESA-2012:0060 CVE-2011-4108 CVE-2011-4109 CVE-2011-4576 CVE-2011-4619	Version:	55
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	openssl
Definition Synopsis:
Redhat 5 section The operating system installed on the system is Red Hat Enterprise Linux 5 AND Packages section openssl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-perl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-devel is earlier than 0:0.9.8e-20.el5_7.1 OR Centos 5 section The operating system installed on the system is CentOS Linux 5.x AND Packages section openssl is earlier than 0:0.9.8e-20.el5_7.1.0.1.centos AND openssl-perl is earlier than 0:0.9.8e-20.el5_7.1.0.1.centos AND openssl-devel is earlier than 0:0.9.8e-20.el5_7.1.0.1.centos

Definition Id: oval:org.mitre.oval:def:21388

Oval ID:	oval:org.mitre.oval:def:21388
Title:	RHSA-2012:0699: openssl security and bug fix update (Moderate)
Description:	Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0699-01 CESA-2012:0699 CVE-2012-2333	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	openssl
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section openssl-devel is earlier than 0:0.9.8e-22.el5_8.4 AND openssl-perl is earlier than 0:0.9.8e-22.el5_8.4 AND openssl is earlier than 0:0.9.8e-22.el5_8.4 AND Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section openssl-devel is earlier than 0:1.0.0-20.el6_2.5 AND openssl-static is earlier than 0:1.0.0-20.el6_2.5 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.5 AND openssl is earlier than 0:1.0.0-20.el6_2.5

Definition Id: oval:org.mitre.oval:def:22038

Oval ID:	oval:org.mitre.oval:def:22038
Title:	RHSA-2010:0978: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0978-01 CESA-2010:0978 CVE-2008-7270 CVE-2010-4180	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	openssl
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section openssl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-perl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-devel is earlier than 0:0.9.8e-12.el5_5.7

Definition Id: oval:org.mitre.oval:def:22097

Oval ID:	oval:org.mitre.oval:def:22097
Title:	RHSA-2010:0979: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0979-01 CVE-2010-4180	Version:	4
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	openssl
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section openssl-devel is earlier than 0:1.0.0-4.el6_0.2 AND openssl-static is earlier than 0:1.0.0-4.el6_0.2 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.2 AND openssl is earlier than 0:1.0.0-4.el6_0.2

Definition Id: oval:org.mitre.oval:def:22306

Oval ID:	oval:org.mitre.oval:def:22306
Title:	ELSA-2010:0978: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0978-01 CVE-2008-7270 CVE-2010-4180	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x rpm test openssl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-perl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-devel is earlier than 0:0.9.8e-12.el5_5.7

Definition Id: oval:org.mitre.oval:def:22343

Oval ID:	oval:org.mitre.oval:def:22343
Title:	RHSA-2010:0888: openssl security update (Important)
Description:	Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0888-01 CVE-2010-3864	Version:	4
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	openssl
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section openssl-devel is earlier than 0:1.0.0-4.el6_0.1 AND openssl-static is earlier than 0:1.0.0-4.el6_0.1 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.1 AND openssl is earlier than 0:1.0.0-4.el6_0.1

Definition Id: oval:org.mitre.oval:def:22780

Oval ID:	oval:org.mitre.oval:def:22780
Title:	ELSA-2010:0979: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0979-01 CVE-2010-4180	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x rpm test openssl-devel is earlier than 0:1.0.0-4.el6_0.2 AND openssl-static is earlier than 0:1.0.0-4.el6_0.2 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.2 AND openssl is earlier than 0:1.0.0-4.el6_0.2

Definition Id: oval:org.mitre.oval:def:23379

Oval ID:	oval:org.mitre.oval:def:23379
Title:	DEPRECATED: ELSA-2012:0699: openssl security and bug fix update (Moderate)
Description:	Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0699-01 CVE-2012-2333	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test openssl-devel is earlier than 0:0.9.8e-22.el5_8.4 AND openssl-perl is earlier than 0:0.9.8e-22.el5_8.4 AND openssl is earlier than 0:0.9.8e-22.el5_8.4 OR rpm test Oracle Linux 6.x AND rpm test openssl-devel is earlier than 0:1.0.0-20.el6_2.5 AND openssl-static is earlier than 0:1.0.0-20.el6_2.5 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.5 AND openssl is earlier than 0:1.0.0-20.el6_2.5

Definition Id: oval:org.mitre.oval:def:23401

Oval ID:	oval:org.mitre.oval:def:23401
Title:	ELSA-2012:0060: openssl security update (Moderate)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0060-01 CVE-2011-4108 CVE-2011-4109 CVE-2011-4576 CVE-2011-4619	Version:	21
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x rpm test openssl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-perl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-devel is earlier than 0:0.9.8e-20.el5_7.1

Definition Id: oval:org.mitre.oval:def:23489

Oval ID:	oval:org.mitre.oval:def:23489
Title:	DEPRECATED: ELSA-2013:0587: openssl security update (Moderate)
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0587-01 CVE-2012-4929 CVE-2013-0166 CVE-2013-0169	Version:	18
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test openssl-devel is earlier than 0:1.0.0-27.el6_4.2 AND openssl-static is earlier than 0:1.0.0-27.el6_4.2 AND openssl-perl is earlier than 0:1.0.0-27.el6_4.2 AND openssl is earlier than 0:1.0.0-27.el6_4.2 OR rpm test Oracle Linux 5.x AND rpm test openssl-devel is earlier than 0:0.9.8e-26.el5_9.1 AND openssl-perl is earlier than 0:0.9.8e-26.el5_9.1 AND openssl is earlier than 0:0.9.8e-26.el5_9.1

Definition Id: oval:org.mitre.oval:def:23654

Oval ID:	oval:org.mitre.oval:def:23654
Title:	ELSA-2010:0888: openssl security update (Important)
Description:	Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0888-01 CVE-2010-3864	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x rpm test openssl-devel is earlier than 0:1.0.0-4.el6_0.1 AND openssl-static is earlier than 0:1.0.0-4.el6_0.1 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.1 AND openssl is earlier than 0:1.0.0-4.el6_0.1

Definition Id: oval:org.mitre.oval:def:23676

Oval ID:	oval:org.mitre.oval:def:23676
Title:	ELSA-2012:0699: openssl security and bug fix update (Moderate)
Description:	Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0699-01 CVE-2012-2333	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test openssl-devel is earlier than 0:0.9.8e-22.el5_8.4 AND openssl-perl is earlier than 0:0.9.8e-22.el5_8.4 AND openssl is earlier than 0:0.9.8e-22.el5_8.4 OR rpm test Oracle Linux 6.x AND rpm test openssl-devel is earlier than 0:1.0.0-20.el6_2.5 AND openssl-static is earlier than 0:1.0.0-20.el6_2.5 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.5 AND openssl is earlier than 0:1.0.0-20.el6_2.5

Definition Id: oval:org.mitre.oval:def:23859

Oval ID:	oval:org.mitre.oval:def:23859
Title:	ELSA-2012:0059: openssl security update (Moderate)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0059-01 CVE-2011-4108 CVE-2011-4576 CVE-2011-4577 CVE-2011-4619	Version:	21
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x rpm test openssl-devel is earlier than 0:1.0.0-20.el6_2.1 AND openssl-static is earlier than 0:1.0.0-20.el6_2.1 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.1 AND openssl is earlier than 0:1.0.0-20.el6_2.1

Definition Id: oval:org.mitre.oval:def:23909

Oval ID:	oval:org.mitre.oval:def:23909
Title:	ELSA-2013:0587: openssl security update (Moderate)
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0587-01 CVE-2012-4929 CVE-2013-0166 CVE-2013-0169	Version:	17
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test openssl-devel is earlier than 0:1.0.0-27.el6_4.2 AND openssl-static is earlier than 0:1.0.0-27.el6_4.2 AND openssl-perl is earlier than 0:1.0.0-27.el6_4.2 AND openssl is earlier than 0:1.0.0-27.el6_4.2 OR rpm test Oracle Linux 5.x AND rpm test openssl-devel is earlier than 0:0.9.8e-26.el5_9.1 AND openssl-perl is earlier than 0:0.9.8e-26.el5_9.1 AND openssl is earlier than 0:0.9.8e-26.el5_9.1

Definition Id: oval:org.mitre.oval:def:24405

Oval ID:	oval:org.mitre.oval:def:24405
Title:	Vulnerability in the TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0169	Version:	5
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.4.2:update_42 and is greater than or equal to 1.4.0 Determine if the version of Java Runtime Environment is less than 1.4.2:update_42 AND Java SE Runtime Environment 4 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.5.0:update_41 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_40 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_39 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_39 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_13 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_14 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:24640

Oval ID:	oval:org.mitre.oval:def:24640
Title:	Vulnerability in OpenSSL before 0.9.8s and 1.x before 1.0.0f, might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer
Description:	The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4576	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0f AND Check if the version of OpenSSL 0.9.1c before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0f (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24702

Oval ID:	oval:org.mitre.oval:def:24702
Title:	Vulnerability in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, might allow remote attackers to execute arbitrary code
Description:	Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-3864	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.8f before 0.9.8p AND Check if the version of OpenSSL 1.0.0 before 1.0.0b AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.8f before 0.9.8p (32_bit) AND Check if the version of OpenSSL 1.0.0 before 1.0.0b (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.8f before 0.9.8p ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.8f before 0.9.8p ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.8f before 0.9.8p under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0b ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0b ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0b under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24730

Oval ID:	oval:org.mitre.oval:def:24730
Title:	Vulnerability in OpenSSL before 0.9.8s and 1.x before 1.0.0f, allows remote attackers to cause a denial of service (assertion failure)
Description:	OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4577	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0f AND Check if the version of OpenSSL 0.9.1c before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0f (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24756

Oval ID:	oval:org.mitre.oval:def:24756
Title:	OpenSSL vulnerability before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d, allows remote OCSP servers to cause a denial of service
Description:	OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0166	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0k AND Check if the version of OpenSSL 1.0.1 before 1.0.1d AND Check if the version of OpenSSL 0.9.3 before 0.9.8y AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0k (32_bit) AND Check if the version of OpenSSL 1.0.1 before 1.0.1d (32_bit) AND Check if the version of OpenSSL 0.9.3 before 0.9.8y (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0k ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0k ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0k under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1d ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1d ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1d under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.3 before 0.9.8y ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.3 before 0.9.8y ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.3 before 0.9.8y under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24765

Oval ID:	oval:org.mitre.oval:def:24765
Title:	Vulnerability in OpenSSL before 0.9.8s and 1.x before 1.0.0f, allows remote attackers to cause a denial of service (CPU consumption)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4619	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0f AND Check if the version of OpenSSL 0.9.1c before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0f (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24897

Oval ID:	oval:org.mitre.oval:def:24897
Title:	OpenSSL vulnerability in before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact
Description:	Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2333	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0j AND Check if the version of OpenSSL 1.0.1 before 1.0.1c AND Check if the version of OpenSSL before 0.9.8x AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0j (32_bit) AND Check if the version of OpenSSL 1.0.1 before 1.0.1c (32_bit) AND Check if the version of OpenSSL before 0.9.8x (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0j ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0j ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0j under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1c ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1c ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1c under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll before 0.9.8x AND Check if the version of ssleay32.dll before 0.9.8x (32_bit) AND Check if the version of ssleay32.dll before 0.9.8x under System Root

Definition Id: oval:org.mitre.oval:def:24936

Oval ID:	oval:org.mitre.oval:def:24936
Title:	Vulnerability in OpenSSL before 0.9.8s and 1.x before 1.0.0f, performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext
Description:	The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4108	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0f AND Check if the version of OpenSSL 0.9.1c before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0f (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24938

Oval ID:	oval:org.mitre.oval:def:24938
Title:	OpenSSL vulnerability before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d, allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks
Description:	The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0169	Version:	4
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0k AND Check if the version of OpenSSL 1.0.1 before 1.0.1d AND Check if the version of OpenSSL 0.9.8 before 0.9.8y AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0k (32_bit) AND Check if the version of OpenSSL 1.0.1 before 1.0.1d (32_bit) AND Check if the version of OpenSSL 0.9.8 before 0.9.8y (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0k ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0k ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0k under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1d ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1d ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1d under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8y ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8y ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8y under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24969

Oval ID:	oval:org.mitre.oval:def:24969
Title:	Vulnerability in OpenSSL 0.9.8q, and 1.0.x before 1.0.0c, does not properly prevent modification of the ciphersuite in the session cache
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.1c before 0.9.8r AND Check if the version of OpenSSL 1.0.0 before 1.0.0c AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.1c before 0.9.8r (32_bit) AND Check if the version of OpenSSL 1.0.0 before 1.0.0c (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8r ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8r ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8r under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25052

Oval ID:	oval:org.mitre.oval:def:25052
Title:	OpenSSL vulnerability in before 0.9.8u and 1.x before 1.0.0h makes it easier for context-dependent attackers to decrypt data
Description:	The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-0884	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0h AND Check if the version of OpenSSL 0.9.1c before 0.9.8u AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0h (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8u (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0h ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0h ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0h under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8u ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8u ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8u under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25059

Oval ID:	oval:org.mitre.oval:def:25059
Title:	Vulnerability in OpenSSL 0.9.8 before 0.9.8s, allows remote attackers to have an unspecified impact by triggering failure of a policy check
Description:	Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4109	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check if the version of OpenSSL 0.9.8 before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check if the version of OpenSSL 0.9.8 before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25193

Oval ID:	oval:org.mitre.oval:def:25193
Title:	SUSE-SU-2013:1165-1 -- Security update for libcurl4
Description:	This update of curl fixes several security issues: * libcurl URL decode buffer boundary flaw (bnc#824517 / CVE-2013-2174) * cookie domain tailmatch (bnc#814655 / CVE-2013-1944) * curl sets SSL_OP_ALL (bnc#742306 / CVE-2011-3389) * When SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier (CVE-2010-4180)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1165-1 CVE-2013-2174 CVE-2013-1944 CVE-2011-3389 CVE-2010-4180	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 10	Product(s):	libcurl4
Definition Synopsis:
SUSE Linux Enterprise Desktop 10 is installed Packages match section libcurl4-32bit RPM is earlier than 0:7.19.0-11.6.1 AND libcurl4 RPM is earlier than 0:7.19.0-11.6.1

Definition Id: oval:org.mitre.oval:def:25236

Oval ID:	oval:org.mitre.oval:def:25236
Title:	SUSE-SU-2013:0701-2 -- Security update for java-1_6_0-ibm
Description:	IBM Java 6 was updated to SR13 FP1, fixing bugs and security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0701-2 CVE-2013-0485 CVE-2013-0809 CVE-2013-1493 CVE-2013-0169	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 10 SUSE Linux Enterprise Desktop 10	Product(s):	java-1_6_0-ibm
Definition Synopsis:
SUSE Linux Enterprise Server 11 release section SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_6_0-ibm RPM is earlier than 0:1.6.0_sr13.1-0.9.1 AND java-1_6_0-ibm-fonts RPM is earlier than 0:1.6.0_sr13.1-0.9.1 AND java-1_6_0-ibm-jdbc RPM is earlier than 0:1.6.0_sr13.1-0.9.1 AND java-1_6_0-ibm-plugin RPM is earlier than 0:1.6.0_sr13.1-0.9.1 AND java-1_6_0-ibm-alsa RPM is earlier than 0:1.6.0_sr13.1-0.9.1 AND SUSE Linux Enterprise Server 10 and SUSE Linux Enterprise Desktop 10 release section Operation system section SUSE Linux Enterprise Server 10 is installed AND SUSE Linux Enterprise Desktop 10 is installed Packages match section java-1_5_0-ibm RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND java-1_5_0-ibm-devel RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND java-1_5_0-ibm-fonts RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND java-1_5_0-ibm-32bit RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND java-1_5_0-ibm-devel-32bit RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND java-1_5_0-ibm-jdbc RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND java-1_5_0-ibm-plugin RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND java-1_5_0-ibm-alsa-32bit RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND java-1_5_0-ibm-alsa RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND SUSE Linux Enterprise Server 10 release section SUSE Linux Enterprise Server 10 is installed Packages match section java-1_6_0-ibm RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND java-1_6_0-ibm-devel RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND java-1_6_0-ibm-fonts RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND java-1_6_0-ibm-jdbc RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND java-1_6_0-ibm-plugin RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND java-1_6_0-ibm-32bit RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND java-1_6_0-ibm-devel-32bit RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND java-1_6_0-ibm-alsa-32bit RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND java-1_6_0-ibm-plugin-32bit RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND java-1_6_0-ibm-alsa RPM is earlier than 0:1.6.0_sr13.1-0.14.1 AND SUSE Linux Enterprise Desktop 10 release section SUSE Linux Enterprise Desktop 10 is installed Packages match section java-1_5_0-ibm-demo RPM is earlier than 0:1.5.0_sr16.1-0.5.1 AND java-1_5_0-ibm-src RPM is earlier than 0:1.5.0_sr16.1-0.5.1

Definition Id: oval:org.mitre.oval:def:25330

Oval ID:	oval:org.mitre.oval:def:25330
Title:	SUSE-SU-2014:0320-1 -- Security update for gnutls
Description:	The GnuTLS library received a critical security fix and other updates.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0320-1 CVE-2014-0092 CVE-2009-5138 CVE-2013-2116 CVE-2013-1619 CVE-2013-0169 CVE-2012-1569 CVE-2012-1573 CVE-2012-0390 CVE-2011-4108	Version:	3
Platform(s):	SUSE Linux Enterprise Server 10	Product(s):	gnutls
Definition Synopsis:
SUSE Linux Enterprise Server 10 is installed Packages match section gnutls RPM is earlier than 0:1.2.10-13.38.1 AND gnutls-devel RPM is earlier than 0:1.2.10-13.38.1 AND gnutls-32bit RPM is earlier than 0:1.2.10-13.38.1 AND gnutls-devel-32bit RPM is earlier than 0:1.2.10-13.38.1

Definition Id: oval:org.mitre.oval:def:25357

Oval ID:	oval:org.mitre.oval:def:25357
Title:	SUSE-SU-2013:0549-3 -- Security update for OpenSSL
Description:	OpenSSL has been updated to fix several security issues: * CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL compression by default. Setting the environment variable "OPENSSL_NO_DEFAULT_ZLIB" to "no" enables compression again. * CVE-2013-0169: Timing attacks against TLS could be used by physically local attackers to gain access to transmitted plain text or private keymaterial. This issue is also known as the "Lucky-13" issue. * CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0549-3 CVE-2012-4929 CVE-2013-0169 CVE-2013-0166	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	OpenSSL
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section libopenssl0_9_8 RPM is earlier than 0:0.9.8j-0.50.1 AND libopenssl0_9_8-hmac RPM is earlier than 0:0.9.8j-0.50.1 AND openssl RPM is earlier than 0:0.9.8j-0.50.1 AND openssl-doc RPM is earlier than 0:0.9.8j-0.50.1 AND libopenssl0_9_8-32bit RPM is earlier than 0:0.9.8j-0.50.1 AND libopenssl0_9_8-hmac-32bit RPM is earlier than 0:0.9.8j-0.50.1

Definition Id: oval:org.mitre.oval:def:25811

Oval ID:	oval:org.mitre.oval:def:25811
Title:	SUSE-SU-2013:0701-1 -- Security update for java-1_7_0-ibm
Description:	IBM Java 7 was updated to SR4-FP1, fixing bugs and security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0701-1 CVE-2013-0485 CVE-2013-0809 CVE-2013-1493 CVE-2013-0169	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	java-1_7_0-ibm
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_7_0-ibm RPM is earlier than 0:1.7.0_sr4.1-0.5.1 AND java-1_7_0-ibm-jdbc RPM is earlier than 0:1.7.0_sr4.1-0.5.1 AND java-1_7_0-ibm-plugin RPM is earlier than 0:1.7.0_sr4.1-0.5.1 AND java-1_7_0-ibm-alsa RPM is earlier than 0:1.7.0_sr4.1-0.5.1

Definition Id: oval:org.mitre.oval:def:25849

Oval ID:	oval:org.mitre.oval:def:25849
Title:	SUSE-SU-2013:0549-2 -- Security update for OpenSSL
Description:	OpenSSL has been updated to fix several security issues: * CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL compression by default. Setting the environment variable "OPENSSL_NO_DEFAULT_ZLIB" to "no" enables compression again. * CVE-2013-0169: Timing attacks against TLS could be used by physically local attackers to gain access to transmitted plain text or private keymaterial. This issue is also known as the "Lucky-13" issue. * CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0549-2 CVE-2012-4929 CVE-2013-0169 CVE-2013-0166	Version:	3
Platform(s):	SUSE Linux Enterprise Server 10	Product(s):	OpenSSL
Definition Synopsis:
SUSE Linux Enterprise Server 10 is installed Packages match section openssl RPM is earlier than 0:0.9.8a-18.45.69.1 AND openssl-devel RPM is earlier than 0:0.9.8a-18.45.69.1 AND openssl-doc RPM is earlier than 0:0.9.8a-18.45.69.1 AND openssl-32bit RPM is earlier than 0:0.9.8a-18.45.69.1 AND openssl-devel-32bit RPM is earlier than 0:0.9.8a-18.45.69.1

Definition Id: oval:org.mitre.oval:def:25900

Oval ID:	oval:org.mitre.oval:def:25900
Title:	SUSE-SU-2013:0554-1 -- Security update for OpenSSL
Description:	OpenSSL has been updated to fix several security issues: * CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL compression by default. Setting the environment variable "OPENSSL_NO_DEFAULT_ZLIB" to "no" enables compression again. Please note that openssl on SUSE Linux Enterprise 10 is not built with compression support. * CVE-2013-0169: Timing attacks against TLS could be used by physically local attackers to gain access to transmitted plain text or private keymaterial. This issue is also known as the "Lucky-13" issue. * CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0554-1 CVE-2012-4929 CVE-2013-0169 CVE-2013-0166	Version:	3
Platform(s):	SUSE Linux Enterprise Server 10 SUSE Linux Enterprise Desktop 10	Product(s):	OpenSSL
Definition Synopsis:
SUSE Linux Enterprise Server 10 and SUSE Linux Enterprise Desktop 10 release section Operation system section SUSE Linux Enterprise Server 10 is installed AND SUSE Linux Enterprise Desktop 10 is installed Packages match section openssl RPM is earlier than 0:0.9.8a-18.76.1 AND openssl-devel RPM is earlier than 0:0.9.8a-18.76.1 AND openssl-32bit RPM is earlier than 0:0.9.8a-18.76.1 AND openssl-devel-32bit RPM is earlier than 0:0.9.8a-18.76.1 AND SUSE Linux Enterprise Server 10 release section SUSE Linux Enterprise Server 10 is installed AND openssl-doc RPM is earlier than 0:0.9.8a-18.76.1

Definition Id: oval:org.mitre.oval:def:26011

Oval ID:	oval:org.mitre.oval:def:26011
Title:	SUSE-SU-2013:0549-1 -- Security update for OpenSSL
Description:	OpenSSL has been updated to fix several security issues: * CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL compression by default. Setting the environment variable "OPENSSL_NO_DEFAULT_ZLIB" to "no" enables compression again. * CVE-2013-0169: Timing attacks against TLS could be used by physically local attackers to gain access to transmitted plain text or private keymaterial. This issue is also known as the "Lucky-13" issue. * CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0549-1 CVE-2012-4929 CVE-2013-0169 CVE-2013-0166	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Desktop 11	Product(s):	OpenSSL
Definition Synopsis:
SUSE Linux Enterprise Server 11 and SUSE Linux Enterprise Desktop 11 release section Operation system section SUSE Linux Enterprise Server 11.x is installed AND SUSE Linux Enterprise Desktop 11.x is installed Packages match section libopenssl0_9_8 RPM is earlier than 0:0.9.8j-0.50.1 AND openssl RPM is earlier than 0:0.9.8j-0.50.1 AND libopenssl0_9_8-32bit RPM is earlier than 0:0.9.8j-0.50.1 AND SUSE Linux Enterprise Server 11 release section SUSE Linux Enterprise Server 11.x is installed Packages match section libopenssl0_9_8-hmac RPM is earlier than 0:0.9.8j-0.50.1 AND openssl-doc RPM is earlier than 0:0.9.8j-0.50.1 AND libopenssl0_9_8-hmac-32bit RPM is earlier than 0:0.9.8j-0.50.1

Definition Id: oval:org.mitre.oval:def:26214

Oval ID:	oval:org.mitre.oval:def:26214
Title:	SUSE-SU-2013:0328-1 -- Security update for Java
Description:	java-1_6_0-openjdk has been updated to IcedTea 1.12.3 (bnc#804654) which contains security and bugfixes: * Security fixes o S8006446: Restrict MBeanServer access (CVE-2013-1486) o S8006777: Improve TLS handling of invalid messages Lucky 13 (CVE-2013-0169) o S8007688: Blacklist known bad certificate (issued by DigiCert) * Backports o S8007393: Possible race condition after JDK-6664509 o S8007611: logging behavior in applet changed * Bug fixes o PR1319: Support GIF lib v5.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0328-1 CVE-2013-1486 CVE-2013-0169	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	Java
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section java-1_6_0-openjdk RPM is earlier than 0:1.6.0.0_b27.1.12.3-0.2.1 AND java-1_6_0-openjdk-demo RPM is earlier than 0:1.6.0.0_b27.1.12.3-0.2.1 AND java-1_6_0-openjdk-devel RPM is earlier than 0:1.6.0.0_b27.1.12.3-0.2.1

Definition Id: oval:org.mitre.oval:def:27073

Oval ID:	oval:org.mitre.oval:def:27073
Title:	DEPRECATED: ELSA-2012-0059 -- openssl security update (moderate)
Description:	[1.0.0-20.1] - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery vulnerability and additional DTLS fixes (#771770) - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775) - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778) - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0059 CVE-2011-4577 CVE-2011-4108 CVE-2011-4576 CVE-2011-4619	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x Packages match section openssl is earlier than 0:1.0.0-20.el6_2.1 AND openssl-devel is earlier than 0:1.0.0-20.el6_2.1 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.1 AND openssl-static is earlier than 0:1.0.0-20.el6_2.1

Definition Id: oval:org.mitre.oval:def:27551

Oval ID:	oval:org.mitre.oval:def:27551
Title:	DEPRECATED: ELSA-2013-0275 -- java-1.7.0-openjdk security update (important)
Description:	[1.7.0.9-2.3.7.1.0.2.el6_3] - Increase release number and rebuild. [1.7.0.9-2.3.7.1.0.1.el6_3] - Update DISTRO_NAME in specfile [1.7.0.9-2.3.7.1.el6_3] - Updated main source tarball - Resolves: rhbz#911529 [1.7.0.9-2.3.7.0.el6_3] - Removed patch1000 sec-2013-02-01-8005615.patch - Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch - Removed patch1010 sec-2013-02-01-7201064.patch - Removed testing - mauve was outdated and - jtreg was icedtea relict - Updated to icedtea 2.3.7 - Added java -Xshare:dump to post (see 513605) fo jitarchs - Resolves: rhbz#911529
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0275 CVE-2013-1485 CVE-2013-1484 CVE-2013-1486 CVE-2013-0169	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section java-1.7.0-openjdk is earlier than 0:1.7.0.9-2.3.7.1.0.1.el5_9 AND java-1.7.0-openjdk-demo is earlier than 0:1.7.0.9-2.3.7.1.0.1.el5_9 AND java-1.7.0-openjdk-devel is earlier than 0:1.7.0.9-2.3.7.1.0.1.el5_9 AND java-1.7.0-openjdk-javadoc is earlier than 0:1.7.0.9-2.3.7.1.0.1.el5_9 AND java-1.7.0-openjdk-src is earlier than 0:1.7.0.9-2.3.7.1.0.1.el5_9 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section java-1.7.0-openjdk is earlier than 0:1.7.0.9-2.3.7.1.0.2.el6_3 AND java-1.7.0-openjdk-demo is earlier than 0:1.7.0.9-2.3.7.1.0.2.el6_3 AND java-1.7.0-openjdk-devel is earlier than 0:1.7.0.9-2.3.7.1.0.2.el6_3 AND java-1.7.0-openjdk-javadoc is earlier than 0:1.7.0.9-2.3.7.1.0.2.el6_3 AND java-1.7.0-openjdk-src is earlier than 0:1.7.0.9-2.3.7.1.0.2.el6_3

Definition Id: oval:org.mitre.oval:def:27605

Oval ID:	oval:org.mitre.oval:def:27605
Title:	DEPRECATED: ELSA-2013-0587 -- openssl security update (moderate)
Description:	[1.0.0-27.2] - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589) - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052) - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB environment variable is set (fixes CVE-2012-4929 #857051) - use __secure_getenv() everywhere instead of getenv() (#839735)
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0587 CVE-2013-0166 CVE-2012-4929 CVE-2013-0169	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-26.el5_9.1 AND openssl-devel is earlier than 0:0.9.8e-26.el5_9.1 AND openssl-perl is earlier than 0:0.9.8e-26.el5_9.1 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section openssl is earlier than 0:1.0.0-27.el6_4.2 AND openssl-devel is earlier than 0:1.0.0-27.el6_4.2 AND openssl-perl is earlier than 0:1.0.0-27.el6_4.2 AND openssl-static is earlier than 0:1.0.0-27.el6_4.2

Definition Id: oval:org.mitre.oval:def:27609

Oval ID:	oval:org.mitre.oval:def:27609
Title:	DEPRECATED: ELSA-2012-0699 -- openssl security and bug fix update (moderate)
Description:	[1.0.0-20.5] - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686) - properly initialize tkeylen in the CVE-2012-0884 fix
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0699 CVE-2012-2333	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-22.el5_8.4 AND openssl-devel is earlier than 0:0.9.8e-22.el5_8.4 AND openssl-perl is earlier than 0:0.9.8e-22.el5_8.4 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section openssl is earlier than 0:1.0.0-20.el6_2.5 AND openssl-devel is earlier than 0:1.0.0-20.el6_2.5 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.5 AND openssl-static is earlier than 0:1.0.0-20.el6_2.5

Definition Id: oval:org.mitre.oval:def:27726

Oval ID:	oval:org.mitre.oval:def:27726
Title:	DEPRECATED: ELSA-2012-0060 -- openssl security update (moderate)
Description:	[0.9.8e-20.1] - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery vulnerability and additional DTLS fixes (#771770) - fix for CVE-2011-4109 - double free in policy checks (#771771) - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775) - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0060 CVE-2011-4108 CVE-2011-4109 CVE-2011-4576 CVE-2011-4619	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-devel is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-perl is earlier than 0:0.9.8e-20.el5_7.1

Definition Id: oval:org.mitre.oval:def:28187

Oval ID:	oval:org.mitre.oval:def:28187
Title:	DEPRECATED: ELSA-2010-0979 -- openssl security update (moderate)
Description:	[1.0.0-4.2] - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG - CVE-2010-3864 (#649304) [1.0.0-4.1] - fix race in extension parsing code - CVE-2010-3864 (#649304)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0979 CVE-2010-3864 CVE-2010-4180	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x Packages match section openssl is earlier than 0:1.0.0-4.el6_0.2 AND openssl-devel is earlier than 0:1.0.0-4.el6_0.2 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.2 AND openssl-static is earlier than 0:1.0.0-4.el6_0.2

CPE : Common Platform Enumeration

Type	Description	Count
Application	f5 Nginx cpe:2.3:a:f5:nginx:0.9.1:::::::* cpe:2.3:a:f5:nginx:0.9.0:::::::* cpe:2.3:a:f5:nginx:0.8.9:::::::* cpe:2.3:a:f5:nginx:0.8.8:::::::* cpe:2.3:a:f5:nginx:0.8.7:::::::* cpe:2.3:a:f5:nginx:0.8.6:::::::* cpe:2.3:a:f5:nginx:0.8.55:::::::* cpe:2.3:a:f5:nginx:0.8.54:::::::* cpe:2.3:a:f5:nginx:0.8.53:::::::* cpe:2.3:a:f5:nginx:0.8.52:::::::* cpe:2.3:a:f5:nginx:0.8.51:::::::* cpe:2.3:a:f5:nginx:0.8.50:::::::* cpe:2.3:a:f5:nginx:0.8.5:::::::* cpe:2.3:a:f5:nginx:0.8.49:::::::* cpe:2.3:a:f5:nginx:0.8.48:::::::* cpe:2.3:a:f5:nginx:0.8.47:::::::* cpe:2.3:a:f5:nginx:0.8.46:::::::* cpe:2.3:a:f5:nginx:0.8.45:::::::* cpe:2.3:a:f5:nginx:0.8.44:::::::* cpe:2.3:a:f5:nginx:0.8.43:::::::* cpe:2.3:a:f5:nginx:0.8.42:::::::* cpe:2.3:a:f5:nginx:0.8.41:::::::* cpe:2.3:a:f5:nginx:0.8.40:::::::* cpe:2.3:a:f5:nginx:0.8.4:::::::* cpe:2.3:a:f5:nginx:0.8.39:::::::* cpe:2.3:a:f5:nginx:0.8.38:::::::* cpe:2.3:a:f5:nginx:0.8.37:::::::* cpe:2.3:a:f5:nginx:0.8.36:::::::* cpe:2.3:a:f5:nginx:0.8.35:::::::* cpe:2.3:a:f5:nginx:0.8.34:::::::* cpe:2.3:a:f5:nginx:0.8.33:::::::* cpe:2.3:a:f5:nginx:0.8.32:::::::* cpe:2.3:a:f5:nginx:0.8.31:::::::* cpe:2.3:a:f5:nginx:0.8.30:::::::* cpe:2.3:a:f5:nginx:0.8.3:::::::* cpe:2.3:a:f5:nginx:0.8.29:::::::* cpe:2.3:a:f5:nginx:0.8.28:::::::* cpe:2.3:a:f5:nginx:0.8.27:::::::* cpe:2.3:a:f5:nginx:0.8.26:::::::* cpe:2.3:a:f5:nginx:0.8.25:::::::* cpe:2.3:a:f5:nginx:0.8.24:::::::* cpe:2.3:a:f5:nginx:0.8.23:::::::* cpe:2.3:a:f5:nginx:0.8.22:::::::* cpe:2.3:a:f5:nginx:0.8.21:::::::* cpe:2.3:a:f5:nginx:0.8.20:::::::* cpe:2.3:a:f5:nginx:0.8.2:::::::* cpe:2.3:a:f5:nginx:0.8.19:::::::* cpe:2.3:a:f5:nginx:0.8.18:::::::* cpe:2.3:a:f5:nginx:0.8.17:::::::* cpe:2.3:a:f5:nginx:0.8.16:::::::* cpe:2.3:a:f5:nginx:0.8.15:::::::* cpe:2.3:a:f5:nginx:0.8.14:::::::* cpe:2.3:a:f5:nginx:0.8.13:::::::* cpe:2.3:a:f5:nginx:0.8.12:::::::* cpe:2.3:a:f5:nginx:0.8.11:::::::* cpe:2.3:a:f5:nginx:0.8.10:::::::* cpe:2.3:a:f5:nginx:0.8.1:::::::* cpe:2.3:a:f5:nginx:0.8.0:::::::* cpe:2.3:a:f5:nginx:0.7.9:::::::* cpe:2.3:a:f5:nginx:0.7.8:::::::* cpe:2.3:a:f5:nginx:0.7.7:::::::* cpe:2.3:a:f5:nginx:0.7.69:::::::* cpe:2.3:a:f5:nginx:0.7.68:::::::* cpe:2.3:a:f5:nginx:0.7.67:::::::* cpe:2.3:a:f5:nginx:0.7.66:::::::* cpe:2.3:a:f5:nginx:0.7.65:::::::* cpe:2.3:a:f5:nginx:0.7.64:::::::* cpe:2.3:a:f5:nginx:0.7.63:::::::* cpe:2.3:a:f5:nginx:0.7.62:::::::* cpe:2.3:a:f5:nginx:0.7.61:::::::* cpe:2.3:a:f5:nginx:0.7.60:::::::* cpe:2.3:a:f5:nginx:0.7.6:::::::* cpe:2.3:a:f5:nginx:0.7.59:::::::* cpe:2.3:a:f5:nginx:0.7.58:::::::* cpe:2.3:a:f5:nginx:0.7.57:::::::* cpe:2.3:a:f5:nginx:0.7.56:::::::* cpe:2.3:a:f5:nginx:0.7.55:::::::* cpe:2.3:a:f5:nginx:0.7.54:::::::* cpe:2.3:a:f5:nginx:0.7.53:::::::* cpe:2.3:a:f5:nginx:0.7.52:::::::* cpe:2.3:a:f5:nginx:0.7.51:::::::* cpe:2.3:a:f5:nginx:0.7.50:::::::* cpe:2.3:a:f5:nginx:0.7.5:::::::* cpe:2.3:a:f5:nginx:0.7.49:::::::* cpe:2.3:a:f5:nginx:0.7.48:::::::* cpe:2.3:a:f5:nginx:0.7.47:::::::* cpe:2.3:a:f5:nginx:0.7.46:::::::* cpe:2.3:a:f5:nginx:0.7.45:::::::* cpe:2.3:a:f5:nginx:0.7.44:::::::* cpe:2.3:a:f5:nginx:0.7.43:::::::* cpe:2.3:a:f5:nginx:0.7.42:::::::* cpe:2.3:a:f5:nginx:0.7.41:::::::* cpe:2.3:a:f5:nginx:0.7.40:::::::* cpe:2.3:a:f5:nginx:0.7.4:::::::* cpe:2.3:a:f5:nginx:0.7.39:::::::* cpe:2.3:a:f5:nginx:0.7.38:::::::* cpe:2.3:a:f5:nginx:0.7.37:::::::* cpe:2.3:a:f5:nginx:0.7.36:::::::* cpe:2.3:a:f5:nginx:0.7.35:::::::* cpe:2.3:a:f5:nginx:0.7.34:::::::* cpe:2.3:a:f5:nginx:0.7.33:::::::* cpe:2.3:a:f5:nginx:0.7.32:::::::* cpe:2.3:a:f5:nginx:0.7.31:::::::* cpe:2.3:a:f5:nginx:0.7.30:::::::* cpe:2.3:a:f5:nginx:0.7.3:::::::* cpe:2.3:a:f5:nginx:0.7.29:::::::* cpe:2.3:a:f5:nginx:0.7.28:::::::* cpe:2.3:a:f5:nginx:0.7.27:::::::* cpe:2.3:a:f5:nginx:0.7.26:::::::* cpe:2.3:a:f5:nginx:0.7.25:::::::* cpe:2.3:a:f5:nginx:0.7.24:::::::* cpe:2.3:a:f5:nginx:0.7.23:::::::* cpe:2.3:a:f5:nginx:0.7.22:::::::* cpe:2.3:a:f5:nginx:0.7.21:::::::* cpe:2.3:a:f5:nginx:0.7.20:::::::* cpe:2.3:a:f5:nginx:0.7.2:::::::* cpe:2.3:a:f5:nginx:0.7.19:::::::* cpe:2.3:a:f5:nginx:0.7.18:::::::* cpe:2.3:a:f5:nginx:0.7.17:::::::* cpe:2.3:a:f5:nginx:0.7.16:::::::* cpe:2.3:a:f5:nginx:0.7.15:::::::* cpe:2.3:a:f5:nginx:0.7.14:::::::* cpe:2.3:a:f5:nginx:0.7.13:::::::* cpe:2.3:a:f5:nginx:0.7.12:::::::* cpe:2.3:a:f5:nginx:0.7.11:::::::* cpe:2.3:a:f5:nginx:0.7.10:::::::* cpe:2.3:a:f5:nginx:0.7.1:::::::* cpe:2.3:a:f5:nginx:0.7.0:::::::* cpe:2.3:a:f5:nginx:0.6.9:::::::* cpe:2.3:a:f5:nginx:0.6.8:::::::* cpe:2.3:a:f5:nginx:0.6.7:::::::* cpe:2.3:a:f5:nginx:0.6.6:::::::* cpe:2.3:a:f5:nginx:0.6.5:::::::* cpe:2.3:a:f5:nginx:0.6.4:::::::* cpe:2.3:a:f5:nginx:0.6.39:::::::* cpe:2.3:a:f5:nginx:0.6.38:::::::* cpe:2.3:a:f5:nginx:0.6.37:::::::* cpe:2.3:a:f5:nginx:0.6.36:::::::* cpe:2.3:a:f5:nginx:0.6.35:::::::* cpe:2.3:a:f5:nginx:0.6.34:::::::* cpe:2.3:a:f5:nginx:0.6.33:::::::* cpe:2.3:a:f5:nginx:0.6.32:::::::* cpe:2.3:a:f5:nginx:0.6.31:::::::* cpe:2.3:a:f5:nginx:0.6.30:::::::* cpe:2.3:a:f5:nginx:0.6.3:::::::* cpe:2.3:a:f5:nginx:0.6.29:::::::* cpe:2.3:a:f5:nginx:0.6.28:::::::* cpe:2.3:a:f5:nginx:0.6.27:::::::* cpe:2.3:a:f5:nginx:0.6.26:::::::* cpe:2.3:a:f5:nginx:0.6.25:::::::* cpe:2.3:a:f5:nginx:0.6.24:::::::* cpe:2.3:a:f5:nginx:0.6.23:::::::* cpe:2.3:a:f5:nginx:0.6.22:::::::* cpe:2.3:a:f5:nginx:0.6.21:::::::* cpe:2.3:a:f5:nginx:0.6.20:::::::* cpe:2.3:a:f5:nginx:0.6.2:::::::* cpe:2.3:a:f5:nginx:0.6.19:::::::* cpe:2.3:a:f5:nginx:0.6.18:::::::* cpe:2.3:a:f5:nginx:0.6.17:::::::* cpe:2.3:a:f5:nginx:0.6.16:::::::* cpe:2.3:a:f5:nginx:0.6.15:::::::* cpe:2.3:a:f5:nginx:0.6.14:::::::* cpe:2.3:a:f5:nginx:0.6.13:::::::* cpe:2.3:a:f5:nginx:0.6.12:::::::* cpe:2.3:a:f5:nginx:0.6.11:::::::* cpe:2.3:a:f5:nginx:0.6.10:::::::* cpe:2.3:a:f5:nginx:0.6.1:::::::* cpe:2.3:a:f5:nginx:0.6.0:::::::* cpe:2.3:a:f5:nginx:0.5.9:::::::* cpe:2.3:a:f5:nginx:0.5.8:::::::* cpe:2.3:a:f5:nginx:0.5.7:::::::* cpe:2.3:a:f5:nginx:0.5.6:::::::* cpe:2.3:a:f5:nginx:0.5.5:::::::* cpe:2.3:a:f5:nginx:0.5.4:::::::* cpe:2.3:a:f5:nginx:0.5.38:::::::* cpe:2.3:a:f5:nginx:0.5.37:::::::* cpe:2.3:a:f5:nginx:0.5.36:::::::* cpe:2.3:a:f5:nginx:0.5.35:::::::* cpe:2.3:a:f5:nginx:0.5.34:::::::* cpe:2.3:a:f5:nginx:0.5.33:::::::* cpe:2.3:a:f5:nginx:0.5.32:::::::* cpe:2.3:a:f5:nginx:0.5.31:::::::* cpe:2.3:a:f5:nginx:0.5.30:::::::* cpe:2.3:a:f5:nginx:0.5.3:::::::* cpe:2.3:a:f5:nginx:0.5.29:::::::* cpe:2.3:a:f5:nginx:0.5.28:::::::* cpe:2.3:a:f5:nginx:0.5.27:::::::* cpe:2.3:a:f5:nginx:0.5.26:::::::* cpe:2.3:a:f5:nginx:0.5.25:::::::* cpe:2.3:a:f5:nginx:0.5.24:::::::* cpe:2.3:a:f5:nginx:0.5.23:::::::* cpe:2.3:a:f5:nginx:0.5.22:::::::* cpe:2.3:a:f5:nginx:0.5.21:::::::* cpe:2.3:a:f5:nginx:0.5.20:::::::* cpe:2.3:a:f5:nginx:0.5.2:::::::* cpe:2.3:a:f5:nginx:0.5.19:::::::* cpe:2.3:a:f5:nginx:0.5.18:::::::* cpe:2.3:a:f5:nginx:0.5.17:::::::* cpe:2.3:a:f5:nginx:0.5.16:::::::* cpe:2.3:a:f5:nginx:0.5.15:::::::* cpe:2.3:a:f5:nginx:0.5.14:::::::* cpe:2.3:a:f5:nginx:0.5.13:::::::* cpe:2.3:a:f5:nginx:0.5.12:::::::* cpe:2.3:a:f5:nginx:0.5.11:::::::* cpe:2.3:a:f5:nginx:0.5.10:::::::* cpe:2.3:a:f5:nginx:0.5.1:::::::* cpe:2.3:a:f5:nginx:0.5.0:::::::* cpe:2.3:a:f5:nginx:0.4.9:::::::* cpe:2.3:a:f5:nginx:0.4.8:::::::* cpe:2.3:a:f5:nginx:0.4.7:::::::* cpe:2.3:a:f5:nginx:0.4.6:::::::* cpe:2.3:a:f5:nginx:0.4.5:::::::* cpe:2.3:a:f5:nginx:0.4.4:::::::* cpe:2.3:a:f5:nginx:0.4.3:::::::* cpe:2.3:a:f5:nginx:0.4.2:::::::* cpe:2.3:a:f5:nginx:0.4.14:::::::* cpe:2.3:a:f5:nginx:0.4.13:::::::* cpe:2.3:a:f5:nginx:0.4.12:::::::* cpe:2.3:a:f5:nginx:0.4.11:::::::* cpe:2.3:a:f5:nginx:0.4.10:::::::* cpe:2.3:a:f5:nginx:0.4.1:::::::* cpe:2.3:a:f5:nginx:0.4.0:::::::* cpe:2.3:a:f5:nginx:0.3.9:::::::* cpe:2.3:a:f5:nginx:0.3.8:::::::* cpe:2.3:a:f5:nginx:0.3.7:::::::* cpe:2.3:a:f5:nginx:0.3.61:::::::* cpe:2.3:a:f5:nginx:0.3.60:::::::* cpe:2.3:a:f5:nginx:0.3.6:::::::* cpe:2.3:a:f5:nginx:0.3.59:::::::* cpe:2.3:a:f5:nginx:0.3.58:::::::* cpe:2.3:a:f5:nginx:0.3.57:::::::* cpe:2.3:a:f5:nginx:0.3.56:::::::* cpe:2.3:a:f5:nginx:0.3.55:::::::* cpe:2.3:a:f5:nginx:0.3.54:::::::* cpe:2.3:a:f5:nginx:0.3.53:::::::* cpe:2.3:a:f5:nginx:0.3.52:::::::* cpe:2.3:a:f5:nginx:0.3.51:::::::* cpe:2.3:a:f5:nginx:0.3.50:::::::* cpe:2.3:a:f5:nginx:0.3.5:::::::* cpe:2.3:a:f5:nginx:0.3.49:::::::* cpe:2.3:a:f5:nginx:0.3.48:::::::* cpe:2.3:a:f5:nginx:0.3.47:::::::* cpe:2.3:a:f5:nginx:0.3.46:::::::* cpe:2.3:a:f5:nginx:0.3.45:::::::* cpe:2.3:a:f5:nginx:0.3.44:::::::* cpe:2.3:a:f5:nginx:0.3.43:::::::* cpe:2.3:a:f5:nginx:0.3.42:::::::* cpe:2.3:a:f5:nginx:0.3.41:::::::* cpe:2.3:a:f5:nginx:0.3.40:::::::* cpe:2.3:a:f5:nginx:0.3.4:::::::* cpe:2.3:a:f5:nginx:0.3.39:::::::* cpe:2.3:a:f5:nginx:0.3.38:::::::* cpe:2.3:a:f5:nginx:0.3.37:::::::* cpe:2.3:a:f5:nginx:0.3.36:::::::* cpe:2.3:a:f5:nginx:0.3.35:::::::* cpe:2.3:a:f5:nginx:0.3.34:::::::* cpe:2.3:a:f5:nginx:0.3.33:::::::* cpe:2.3:a:f5:nginx:0.3.32:::::::* cpe:2.3:a:f5:nginx:0.3.31:::::::* cpe:2.3:a:f5:nginx:0.3.30:::::::* cpe:2.3:a:f5:nginx:0.3.3:::::::* cpe:2.3:a:f5:nginx:0.3.29:::::::* cpe:2.3:a:f5:nginx:0.3.28:::::::* cpe:2.3:a:f5:nginx:0.3.27:::::::* cpe:2.3:a:f5:nginx:0.3.26:::::::* cpe:2.3:a:f5:nginx:0.3.25:::::::* cpe:2.3:a:f5:nginx:0.3.24:::::::* cpe:2.3:a:f5:nginx:0.3.23:::::::* cpe:2.3:a:f5:nginx:0.3.22:::::::* cpe:2.3:a:f5:nginx:0.3.21:::::::* cpe:2.3:a:f5:nginx:0.3.20:::::::* cpe:2.3:a:f5:nginx:0.3.2:::::::* cpe:2.3:a:f5:nginx:0.3.19:::::::* cpe:2.3:a:f5:nginx:0.3.18:::::::* cpe:2.3:a:f5:nginx:0.3.17:::::::* cpe:2.3:a:f5:nginx:0.3.16:::::::* cpe:2.3:a:f5:nginx:0.3.15:::::::* cpe:2.3:a:f5:nginx:0.3.14:::::::* cpe:2.3:a:f5:nginx:0.3.13:::::::* cpe:2.3:a:f5:nginx:0.3.12:::::::* cpe:2.3:a:f5:nginx:0.3.11:::::::* cpe:2.3:a:f5:nginx:0.3.10:::::::* cpe:2.3:a:f5:nginx:0.3.1:::::::* cpe:2.3:a:f5:nginx:0.3.0:::::::* cpe:2.3:a:f5:nginx:0.2.6:::::::* cpe:2.3:a:f5:nginx:0.2.5:::::::* cpe:2.3:a:f5:nginx:0.2.4:::::::* cpe:2.3:a:f5:nginx:0.2.3:::::::* cpe:2.3:a:f5:nginx:0.2.2:::::::* cpe:2.3:a:f5:nginx:0.2.1:::::::* cpe:2.3:a:f5:nginx:0.2.0:::::::* cpe:2.3:a:f5:nginx:0.1.9:::::::* cpe:2.3:a:f5:nginx:0.1.8:::::::* cpe:2.3:a:f5:nginx:0.1.7:::::::* cpe:2.3:a:f5:nginx:0.1.6:::::::* cpe:2.3:a:f5:nginx:0.1.5:::::::* cpe:2.3:a:f5:nginx:0.1.45:::::::* cpe:2.3:a:f5:nginx:0.1.44:::::::* cpe:2.3:a:f5:nginx:0.1.43:::::::* cpe:2.3:a:f5:nginx:0.1.42:::::::* cpe:2.3:a:f5:nginx:0.1.41:::::::* cpe:2.3:a:f5:nginx:0.1.40:::::::* cpe:2.3:a:f5:nginx:0.1.4:::::::* cpe:2.3:a:f5:nginx:0.1.39:::::::* cpe:2.3:a:f5:nginx:0.1.38:::::::* cpe:2.3:a:f5:nginx:0.1.37:::::::* cpe:2.3:a:f5:nginx:0.1.36:::::::* cpe:2.3:a:f5:nginx:0.1.35:::::::* cpe:2.3:a:f5:nginx:0.1.34:::::::* cpe:2.3:a:f5:nginx:0.1.33:::::::* cpe:2.3:a:f5:nginx:0.1.32:::::::* cpe:2.3:a:f5:nginx:0.1.31:::::::* cpe:2.3:a:f5:nginx:0.1.30:::::::* cpe:2.3:a:f5:nginx:0.1.3:::::::* cpe:2.3:a:f5:nginx:0.1.29:::::::* cpe:2.3:a:f5:nginx:0.1.28:::::::* cpe:2.3:a:f5:nginx:0.1.27:::::::* cpe:2.3:a:f5:nginx:0.1.26:::::::* cpe:2.3:a:f5:nginx:0.1.25:::::::* cpe:2.3:a:f5:nginx:0.1.24:::::::* cpe:2.3:a:f5:nginx:0.1.23:::::::* cpe:2.3:a:f5:nginx:0.1.22:::::::* cpe:2.3:a:f5:nginx:0.1.21:::::::* cpe:2.3:a:f5:nginx:0.1.20:::::::* cpe:2.3:a:f5:nginx:0.1.2:::::::* cpe:2.3:a:f5:nginx:0.1.19:::::::* cpe:2.3:a:f5:nginx:0.1.18:::::::* cpe:2.3:a:f5:nginx:0.1.17:::::::* cpe:2.3:a:f5:nginx:0.1.16:::::::* cpe:2.3:a:f5:nginx:0.1.15:::::::* cpe:2.3:a:f5:nginx:0.1.14:::::::* cpe:2.3:a:f5:nginx:0.1.13:::::::* cpe:2.3:a:f5:nginx:0.1.12:::::::* cpe:2.3:a:f5:nginx:0.1.11:::::::* cpe:2.3:a:f5:nginx:0.1.10:::::::* cpe:2.3:a:f5:nginx:0.1.1:::::::* cpe:2.3:a:f5:nginx:0.1.0:::::::* cpe:2.3:a:f5:nginx:r2::::open_source_subscription::: cpe:2.3:a:f5:nginx:r1::::open_source_subscription::: cpe:2.3:a:f5:nginx::::::::	340
Application	Openssl cpe:2.3:a:openssl:openssl:1.0.1u:::::::* cpe:2.3:a:openssl:openssl:1.0.1t:::::::* cpe:2.3:a:openssl:openssl:1.0.1s:::::::* cpe:2.3:a:openssl:openssl:1.0.1r:::::::* cpe:2.3:a:openssl:openssl:1.0.1q:::::::* cpe:2.3:a:openssl:openssl:1.0.1o:::::::* cpe:2.3:a:openssl:openssl:1.0.1n:::::::* cpe:2.3:a:openssl:openssl:1.0.1m:::::::* cpe:2.3:a:openssl:openssl:1.0.1l:::::::* cpe:2.3:a:openssl:openssl:1.0.1k:::::::* cpe:2.3:a:openssl:openssl:1.0.1j:::::::* cpe:2.3:a:openssl:openssl:1.0.1i:::::::* cpe:2.3:a:openssl:openssl:1.0.1h:::::::* cpe:2.3:a:openssl:openssl:1.0.1g:::::::* cpe:2.3:a:openssl:openssl:1.0.1f:::::::* cpe:2.3:a:openssl:openssl:1.0.1e:::::::* cpe:2.3:a:openssl:openssl:1.0.1d:::::::* cpe:2.3:a:openssl:openssl:1.0.1c:::::::* cpe:2.3:a:openssl:openssl:1.0.1b:::::::* cpe:2.3:a:openssl:openssl:1.0.1a:::::::* cpe:2.3:a:openssl:openssl:1.0.1:-:::::: cpe:2.3:a:openssl:openssl:1.0.1:beta1:::::: cpe:2.3:a:openssl:openssl:1.0.1:beta3:::::: cpe:2.3:a:openssl:openssl:1.0.1:beta2:::::: cpe:2.3:a:openssl:openssl:1.0.0s:::::::* cpe:2.3:a:openssl:openssl:1.0.0r:::::::* cpe:2.3:a:openssl:openssl:1.0.0q:::::::* cpe:2.3:a:openssl:openssl:1.0.0p:::::::* cpe:2.3:a:openssl:openssl:1.0.0o:::::::* cpe:2.3:a:openssl:openssl:1.0.0n:::::::* cpe:2.3:a:openssl:openssl:1.0.0m:::::::* cpe:2.3:a:openssl:openssl:1.0.0l:::::::* cpe:2.3:a:openssl:openssl:1.0.0k:::::::* cpe:2.3:a:openssl:openssl:1.0.0j:::::::* cpe:2.3:a:openssl:openssl:1.0.0i:::::::* cpe:2.3:a:openssl:openssl:1.0.0h:::::::* cpe:2.3:a:openssl:openssl:1.0.0g:::::::* cpe:2.3:a:openssl:openssl:1.0.0f:::::::* cpe:2.3:a:openssl:openssl:1.0.0e:::::::* cpe:2.3:a:openssl:openssl:1.0.0d:::::::* cpe:2.3:a:openssl:openssl:1.0.0c:::::::* cpe:2.3:a:openssl:openssl:1.0.0b:::::::* cpe:2.3:a:openssl:openssl:1.0.0a:::::::* cpe:2.3:a:openssl:openssl:1.0.0:-:::::: cpe:2.3:a:openssl:openssl:1.0.0:beta3:::::: cpe:2.3:a:openssl:openssl:1.0.0:beta2:::::: cpe:2.3:a:openssl:openssl:1.0.0:beta5:::::: cpe:2.3:a:openssl:openssl:1.0.0:beta4:::::: cpe:2.3:a:openssl:openssl:1.0.0:beta1:::::: cpe:2.3:a:openssl:openssl:1.0::openvms::::: cpe:2.3:a:openssl:openssl:0.9.8zg:::::::* cpe:2.3:a:openssl:openssl:0.9.8zf:::::::* cpe:2.3:a:openssl:openssl:0.9.8ze:::::::* cpe:2.3:a:openssl:openssl:0.9.8zc:::::::* cpe:2.3:a:openssl:openssl:0.9.8zb:::::::* cpe:2.3:a:openssl:openssl:0.9.8za:::::::* cpe:2.3:a:openssl:openssl:0.9.8z:::::::* cpe:2.3:a:openssl:openssl:0.9.8y:::::::* cpe:2.3:a:openssl:openssl:0.9.8x:::::::* cpe:2.3:a:openssl:openssl:0.9.8w:::::::* cpe:2.3:a:openssl:openssl:0.9.8v:::::::* cpe:2.3:a:openssl:openssl:0.9.8u:::::::* cpe:2.3:a:openssl:openssl:0.9.8t:::::::* cpe:2.3:a:openssl:openssl:0.9.8s:::::::* cpe:2.3:a:openssl:openssl:0.9.8r:::::::* cpe:2.3:a:openssl:openssl:0.9.8q:::::::* cpe:2.3:a:openssl:openssl:0.9.8p:::::::* cpe:2.3:a:openssl:openssl:0.9.8o:::::::* cpe:2.3:a:openssl:openssl:0.9.8n:::::::* cpe:2.3:a:openssl:openssl:0.9.8m:-:::::: cpe:2.3:a:openssl:openssl:0.9.8m:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.8l:::::::* cpe:2.3:a:openssl:openssl:0.9.8k:::::::* cpe:2.3:a:openssl:openssl:0.9.8j:::::::* cpe:2.3:a:openssl:openssl:0.9.8i:::::::* cpe:2.3:a:openssl:openssl:0.9.8h:::::::* cpe:2.3:a:openssl:openssl:0.9.8g-9:::::::* cpe:2.3:a:openssl:openssl:0.9.8g:::::::* cpe:2.3:a:openssl:openssl:0.9.8g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f:::::::* cpe:2.3:a:openssl:openssl:0.9.8f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f::::::x86: cpe:2.3:a:openssl:openssl:0.9.8e:::::::* cpe:2.3:a:openssl:openssl:0.9.8e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8e::::::x86: cpe:2.3:a:openssl:openssl:0.9.8d:::::::* cpe:2.3:a:openssl:openssl:0.9.8d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8d::::::x86: cpe:2.3:a:openssl:openssl:0.9.8c-1:::::::* cpe:2.3:a:openssl:openssl:0.9.8c:::::::* cpe:2.3:a:openssl:openssl:0.9.8c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8c::::::x86: cpe:2.3:a:openssl:openssl:0.9.8b:::::::* cpe:2.3:a:openssl:openssl:0.9.8b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8b::::::x86: cpe:2.3:a:openssl:openssl:0.9.8a:::::::* cpe:2.3:a:openssl:openssl:0.9.8a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8a::::::x86: cpe:2.3:a:openssl:openssl:0.9.8:-:::::: cpe:2.3:a:openssl:openssl:0.9.8::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta4:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta5:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta6:::::: cpe:2.3:a:openssl:openssl:0.9.8::::::x86: cpe:2.3:a:openssl:openssl:0.9.7m:::::::* cpe:2.3:a:openssl:openssl:0.9.7m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7m::::::x86: cpe:2.3:a:openssl:openssl:0.9.7l:::::::* cpe:2.3:a:openssl:openssl:0.9.7l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7l::::::x86: cpe:2.3:a:openssl:openssl:0.9.7k:::::::* cpe:2.3:a:openssl:openssl:0.9.7k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7k::::::x86: cpe:2.3:a:openssl:openssl:0.9.7j:::::::* cpe:2.3:a:openssl:openssl:0.9.7j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7j::::::x86: cpe:2.3:a:openssl:openssl:0.9.7i:::::::* cpe:2.3:a:openssl:openssl:0.9.7i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7i::::::x86: cpe:2.3:a:openssl:openssl:0.9.7h:::::::* cpe:2.3:a:openssl:openssl:0.9.7h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7h::::::x86: cpe:2.3:a:openssl:openssl:0.9.7g:::::::* cpe:2.3:a:openssl:openssl:0.9.7g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7g::::::x86: cpe:2.3:a:openssl:openssl:0.9.7f:::::::* cpe:2.3:a:openssl:openssl:0.9.7f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7f::::::x86: cpe:2.3:a:openssl:openssl:0.9.7e:::::::* cpe:2.3:a:openssl:openssl:0.9.7e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7e::::::x86: cpe:2.3:a:openssl:openssl:0.9.7d:::::::* cpe:2.3:a:openssl:openssl:0.9.7d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7d::::::x86: cpe:2.3:a:openssl:openssl:0.9.7c:::::::* cpe:2.3:a:openssl:openssl:0.9.7c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7c::::::x86: cpe:2.3:a:openssl:openssl:0.9.7b:::::::* cpe:2.3:a:openssl:openssl:0.9.7b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7b::::::x86: cpe:2.3:a:openssl:openssl:0.9.7a:::::::* cpe:2.3:a:openssl:openssl:0.9.7a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7a::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.7:-:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta6:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6m:::::::* cpe:2.3:a:openssl:openssl:0.9.6m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6m::::::x86: cpe:2.3:a:openssl:openssl:0.9.6l:::::::* cpe:2.3:a:openssl:openssl:0.9.6l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6l::::::x86: cpe:2.3:a:openssl:openssl:0.9.6k:::::::* cpe:2.3:a:openssl:openssl:0.9.6k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6k::::::x86: cpe:2.3:a:openssl:openssl:0.9.6j:::::::* cpe:2.3:a:openssl:openssl:0.9.6j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6j::::::x86: cpe:2.3:a:openssl:openssl:0.9.6i:::::::* cpe:2.3:a:openssl:openssl:0.9.6i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6i::::::x86: cpe:2.3:a:openssl:openssl:0.9.6h:::::::* cpe:2.3:a:openssl:openssl:0.9.6h:bogus:::::: cpe:2.3:a:openssl:openssl:0.9.6h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6h::::::x86: cpe:2.3:a:openssl:openssl:0.9.6g:::::::* cpe:2.3:a:openssl:openssl:0.9.6g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6g::::::x86: cpe:2.3:a:openssl:openssl:0.9.6f:::::::* cpe:2.3:a:openssl:openssl:0.9.6f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6f::::::x86: cpe:2.3:a:openssl:openssl:0.9.6e:::::::* cpe:2.3:a:openssl:openssl:0.9.6e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6e::::::x86: cpe:2.3:a:openssl:openssl:0.9.6d:-:::::: cpe:2.3:a:openssl:openssl:0.9.6d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6d::::::x86: cpe:2.3:a:openssl:openssl:0.9.6c:::::::* cpe:2.3:a:openssl:openssl:0.9.6c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6c::::::x86: cpe:2.3:a:openssl:openssl:0.9.6b:::::::* cpe:2.3:a:openssl:openssl:0.9.6b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6b::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:-:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6a::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6:-:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6::::::x86: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5a:-:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a::::::x86: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5:-:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5::::::x86: cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.4:::::::* cpe:2.3:a:openssl:openssl:0.9.4::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.4::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.4::::::x86: cpe:2.3:a:openssl:openssl:0.9.3a:::::::* cpe:2.3:a:openssl:openssl:0.9.3a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3a::::::x86: cpe:2.3:a:openssl:openssl:0.9.3:-:::::: cpe:2.3:a:openssl:openssl:0.9.3::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3::::::x86: cpe:2.3:a:openssl:openssl:0.9.2b:::::::* cpe:2.3:a:openssl:openssl:0.9.2b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.2b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.2b::::::x86: cpe:2.3:a:openssl:openssl:0.9.1c:::::::* cpe:2.3:a:openssl:openssl:0.9.1c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.1c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.1c::::::x86: cpe:2.3:a:openssl:openssl:0.9.1b:::::::* cpe:2.3:a:openssl:openssl:0.9.0b:::::::* cpe:2.3:a:openssl:openssl:::::::: cpe:2.3:a:openssl:openssl:::openvms:::::* cpe:2.3:a:openssl:openssl:-:::::::*	325
Application	Oracle Openjdk cpe:2.3:a:oracle:openjdk:1.7.0:-:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update2:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update3:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update4:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update5:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update6:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update7:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update9:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update10:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update11:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update13:::::: cpe:2.3:a:oracle:openjdk:1.7.0:update1:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update34:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update35:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update37:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update38:::::: cpe:2.3:a:oracle:openjdk:1.6.0:-:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update2:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update3:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update4:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update5:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update6:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update7:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update11:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update12:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update13:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update14:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update15:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update16:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update17:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update18:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update19:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update20:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update21:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update22:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update23:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update24:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update25:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update26:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update27:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update29:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update30:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update31:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update32:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update33:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update1:::::: cpe:2.3:a:oracle:openjdk:1.6.0:update10::::::	47
Application	Polarssl cpe:2.3:a:polarssl:polarssl:1.1.4:::::::* cpe:2.3:a:polarssl:polarssl:1.1.3:::::::* cpe:2.3:a:polarssl:polarssl:1.1.2:::::::* cpe:2.3:a:polarssl:polarssl:1.1.1:::::::* cpe:2.3:a:polarssl:polarssl:1.1.0:::::::* cpe:2.3:a:polarssl:polarssl:1.1.0:rc1:::::: cpe:2.3:a:polarssl:polarssl:1.1.0:rc0:::::: cpe:2.3:a:polarssl:polarssl:1.0.0:::::::* cpe:2.3:a:polarssl:polarssl:0.99:pre4:::::: cpe:2.3:a:polarssl:polarssl:0.99:pre5:::::: cpe:2.3:a:polarssl:polarssl:0.99:pre1:::::: cpe:2.3:a:polarssl:polarssl:0.99:pre3:::::: cpe:2.3:a:polarssl:polarssl:0.14.3:::::::* cpe:2.3:a:polarssl:polarssl:0.14.2:::::::* cpe:2.3:a:polarssl:polarssl:0.14.0:::::::* cpe:2.3:a:polarssl:polarssl:0.13.1:::::::* cpe:2.3:a:polarssl:polarssl:0.12.1:::::::* cpe:2.3:a:polarssl:polarssl:0.12.0:::::::* cpe:2.3:a:polarssl:polarssl:0.11.1:::::::* cpe:2.3:a:polarssl:polarssl:0.11.0:::::::* cpe:2.3:a:polarssl:polarssl:0.10.1:::::::* cpe:2.3:a:polarssl:polarssl:0.10.0:::::::*	22
Application	Redhat Openssl cpe:2.3:a:redhat:openssl:0.9.7a-2:::::::* cpe:2.3:a:redhat:openssl:0.9.6b-3:::::::* cpe:2.3:a:redhat:openssl:0.9.6-15:::::::*	3
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	5
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:5.0:::::::*	1
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:14:::::::* cpe:2.3:o:fedoraproject:fedora:13:::::::*	2
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.4:::::::* cpe:2.3:o:opensuse:opensuse:11.3:::::::* cpe:2.3:o:opensuse:opensuse:11.2:::::::* cpe:2.3:o:opensuse:opensuse:11.1:::::::*	4
Os	Suse Linux Enterprise cpe:2.3:o:suse:linux_enterprise:11.0:sp1::::::	1
Os	Suse Linux Enterprise Desktop cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:::::: cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:::::: cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:::-:::*	3
Os	Suse Linux Enterprise Server cpe:2.3:o:suse:linux_enterprise_server:10:sp3:::-:::* cpe:2.3:o:suse:linux_enterprise_server:10:sp4:::-:::* cpe:2.3:o:suse:linux_enterprise_server:9:::::::*	3

OpenVAS Exploits

Date	Description
2012-08-31	Name : VMSA-2012-0013 VMware vSphere and vCOps updates to third party libraries. File : nvt/gb_VMSA-2012-0013.nasl
2012-08-30	Name : Fedora Update for openssl FEDORA-2012-4630 File : nvt/gb_fedora_2012_4630_openssl_fc17.nasl
2012-08-30	Name : Fedora Update for openssl FEDORA-2012-7939 File : nvt/gb_fedora_2012_7939_openssl_fc17.nasl
2012-08-10	Name : FreeBSD Ports: FreeBSD File : nvt/freebsd_FreeBSD19.nasl
2012-08-03	Name : Mandriva Update for openssl MDVSA-2012:073 (openssl) File : nvt/gb_mandriva_MDVSA_2012_073.nasl
2012-08-03	Name : Mandriva Update for openssl MDVSA-2012:038 (openssl) File : nvt/gb_mandriva_MDVSA_2012_038.nasl
2012-08-03	Name : Mandriva Update for openssl MDVSA-2012:007 (openssl) File : nvt/gb_mandriva_MDVSA_2012_007.nasl
2012-08-02	Name : SuSE Update for openssl openSUSE-SU-2012:0083-1 (openssl) File : nvt/gb_suse_2012_0083_1.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2012:0426 centos6 File : nvt/gb_CESA-2012_0426_openssl_centos6.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2012:0699 centos5 File : nvt/gb_CESA-2012_0699_openssl_centos5.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2012:0699 centos6 File : nvt/gb_CESA-2012_0699_openssl_centos6.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2012:0426 centos5 File : nvt/gb_CESA-2012_0426_openssl_centos5.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2012:0086 centos4 File : nvt/gb_CESA-2012_0086_openssl_centos4.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2010:0977 centos4 x86_64 File : nvt/gb_CESA-2010_0977_openssl_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2012:0059 centos6 File : nvt/gb_CESA-2012_0059_openssl_centos6.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2012:0060 centos5 File : nvt/gb_CESA-2012_0060_openssl_centos5.nasl
2012-07-09	Name : RedHat Update for openssl RHSA-2012:0059-01 File : nvt/gb_RHSA-2012_0059-01_openssl.nasl
2012-06-04	Name : Fedora Update for openssl FEDORA-2012-8024 File : nvt/gb_fedora_2012_8024_openssl_fc15.nasl
2012-06-04	Name : Fedora Update for openssl FEDORA-2012-8014 File : nvt/gb_fedora_2012_8014_openssl_fc16.nasl
2012-06-01	Name : RedHat Update for openssl RHSA-2012:0699-01 File : nvt/gb_RHSA-2012_0699-01_openssl.nasl
2012-05-31	Name : FreeBSD Ports: openssl File : nvt/freebsd_openssl9.nasl
2012-05-31	Name : Debian Security Advisory DSA 2475-1 (openssl) File : nvt/deb_2475_1.nasl
2012-05-25	Name : Ubuntu Update for openssl USN-1451-1 File : nvt/gb_ubuntu_USN_1451_1.nasl
2012-05-11	Name : Fedora Update for openssl FEDORA-2012-6395 File : nvt/gb_fedora_2012_6395_openssl_fc15.nasl
2012-04-30	Name : Fedora Update for openssl FEDORA-2012-6403 File : nvt/gb_fedora_2012_6403_openssl_fc16.nasl
2012-04-30	Name : Debian Security Advisory DSA 2454-1 (openssl) File : nvt/deb_2454_1.nasl
2012-04-30	Name : FreeBSD Ports: openssl File : nvt/freebsd_openssl8.nasl
2012-04-13	Name : Fedora Update for openssl FEDORA-2012-4659 File : nvt/gb_fedora_2012_4659_openssl_fc15.nasl
2012-04-11	Name : Fedora Update for openssl FEDORA-2012-4665 File : nvt/gb_fedora_2012_4665_openssl_fc16.nasl
2012-04-02	Name : Fedora Update for openssl FEDORA-2012-0708 File : nvt/gb_fedora_2012_0708_openssl_fc16.nasl
2012-04-02	Name : Fedora Update for openssl FEDORA-2012-0232 File : nvt/gb_fedora_2012_0232_openssl_fc16.nasl
2012-03-29	Name : RedHat Update for openssl RHSA-2012:0426-01 File : nvt/gb_RHSA-2012_0426-01_openssl.nasl
2012-03-16	Name : VMSA-2011-0003.2 Third party component updates for VMware vCenter Server, vCe... File : nvt/gb_VMSA-2011-0003.nasl
2012-03-15	Name : VMSA-2011-0013.2 VMware third party component updates for VMware vCenter Serv... File : nvt/gb_VMSA-2011-0013.nasl
2012-03-12	Name : Gentoo Security Advisory GLSA 201203-12 (openssl) File : nvt/glsa_201203_12.nasl
2012-02-13	Name : Ubuntu Update for openssl USN-1357-1 File : nvt/gb_ubuntu_USN_1357_1.nasl
2012-02-12	Name : FreeBSD Ports: openssl File : nvt/freebsd_openssl5.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-01 (openssl) File : nvt/glsa_201110_01.nasl
2012-02-12	Name : FreeBSD Ports: openssl File : nvt/freebsd_openssl6.nasl
2012-02-11	Name : Debian Security Advisory DSA 2390-1 (openssl) File : nvt/deb_2390_1.nasl
2012-02-03	Name : RedHat Update for openssl RHSA-2012:0086-01 File : nvt/gb_RHSA-2012_0086-01_openssl.nasl
2012-02-01	Name : Mandriva Update for openssl MDVSA-2012:011 (openssl) File : nvt/gb_mandriva_MDVSA_2012_011.nasl
2012-01-25	Name : RedHat Update for openssl RHSA-2012:0060-01 File : nvt/gb_RHSA-2012_0060-01_openssl.nasl
2012-01-25	Name : Fedora Update for openssl FEDORA-2012-0702 File : nvt/gb_fedora_2012_0702_openssl_fc15.nasl
2012-01-20	Name : Mandriva Update for openssl MDVSA-2012:006 (openssl) File : nvt/gb_mandriva_MDVSA_2012_006.nasl
2012-01-20	Name : OpenSSL Multiple Vulnerabilities File : nvt/gb_openssl_51281.nasl
2012-01-16	Name : Fedora Update for openssl FEDORA-2012-0250 File : nvt/gb_fedora_2012_0250_openssl_fc15.nasl
2011-09-12	Name : Fedora Update for openssl FEDORA-2011-12281 File : nvt/gb_fedora_2011_12281_openssl_fc14.nasl
2011-08-19	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2011-004) File : nvt/secpod_macosx_su11-004.nasl
2011-08-09	Name : CentOS Update for openssl CESA-2010:0978 centos5 i386 File : nvt/gb_CESA-2010_0978_openssl_centos5_i386.nasl
2011-05-05	Name : HP-UX Update for OpenSSL HPSBUX02638 File : nvt/gb_hp_ux_HPSBUX02638.nasl
2011-03-24	Name : Fedora Update for openssl FEDORA-2011-1255 File : nvt/gb_fedora_2011_1255_openssl_fc13.nasl
2011-02-16	Name : Fedora Update for openssl FEDORA-2011-1273 File : nvt/gb_fedora_2011_1273_openssl_fc14.nasl
2011-01-31	Name : CentOS Update for openssl CESA-2010:0977 centos4 i386 File : nvt/gb_CESA-2010_0977_openssl_centos4_i386.nasl
2011-01-24	Name : FreeBSD Ports: openssl File : nvt/freebsd_openssl3.nasl
2011-01-24	Name : FreeBSD Security Advisory (FreeBSD-SA-10:10.openssl.asc) File : nvt/freebsdsa_openssl8.nasl
2010-12-28	Name : RedHat Update for openssl RHSA-2010:0978-01 File : nvt/gb_RHSA-2010_0978-01_openssl.nasl
2010-12-28	Name : RedHat Update for openssl RHSA-2010:0977-01 File : nvt/gb_RHSA-2010_0977-01_openssl.nasl
2010-12-28	Name : Fedora Update for openssl FEDORA-2010-18736 File : nvt/gb_fedora_2010_18736_openssl_fc13.nasl
2010-12-28	Name : Fedora Update for openssl FEDORA-2010-18765 File : nvt/gb_fedora_2010_18765_openssl_fc14.nasl
2010-12-23	Name : Ubuntu Update for openssl vulnerabilities USN-1029-1 File : nvt/gb_ubuntu_USN_1029_1.nasl
2010-12-23	Name : Mandriva Update for openssl MDVSA-2010:248 (openssl) File : nvt/gb_mandriva_MDVSA_2010_248.nasl
2010-12-02	Name : Fedora Update for openssl FEDORA-2010-17827 File : nvt/gb_fedora_2010_17827_openssl_fc14.nasl
2010-11-23	Name : Fedora Update for openssl FEDORA-2010-17826 File : nvt/gb_fedora_2010_17826_openssl_fc12.nasl
2010-11-23	Name : Fedora Update for openssl FEDORA-2010-17847 File : nvt/gb_fedora_2010_17847_openssl_fc13.nasl
2010-11-23	Name : Ubuntu Update for openssl vulnerability USN-1018-1 File : nvt/gb_ubuntu_USN_1018_1.nasl
2010-11-23	Name : Mandriva Update for openssl MDVSA-2010:238 (openssl) File : nvt/gb_mandriva_MDVSA_2010_238.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-340-01 openssl File : nvt/esoft_slk_ssa_2010_340_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-326-01 openssl File : nvt/esoft_slk_ssa_2010_326_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
78190	OpenSSL Server Gated Cryptograpy (SGC) Handshake Restart Handling Remote DoS
78189	OpenSSL RFC 3779 Certificate Data Parsing Assertion Failure Remote DoS
78188	OpenSSL SSL 3.0 Record Cipher Padding Uninitialized Memory Information Disclo...
78187	OpenSSL X509_V_FLAG_POLICY_CHECK Double-free Unspecified Weakness
78186	OpenSSL Datagram Transport Layer Security (DTLS) CBC Encryption Weakness Plai...
69565	OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG Session Resume Ciphersuite Do... OpenSSL contains a flaw related to the SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG workaround in the SSL/TLS server code. The issue is triggered when a remote attacker downgrades the cached ciphersuite, leading to the client using a weaker ciphersuite.
69265	OpenSSL TLS Server ssl/t1_lib.c Extension Parsing Race Condition Overflow OpenSSL TLS Server is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in a heap overflow. With a specially crafted request, a remote attacker can cause a denial of service and potentially compromise an application using the library.

Information Assurance Vulnerability Management (IAVM)

Date	Description
2013-10-17	IAVM : 2013-A-0199 - Multiple Vulnerabilities in Oracle Fusion Middleware Severity : Category I - VMSKEY : V0040786
2013-09-19	IAVM : 2013-A-0181 - Multiple Vulnerabilities in Junos Pulse Secure Access Service (IVE) Severity : Category I - VMSKEY : V0040371
2013-09-19	IAVM : 2013-A-0180 - Multiple Vulnerabilities in Juniper Networks Junos Pulse Access Service Acces... Severity : Category I - VMSKEY : V0040372
2013-09-19	IAVM : 2013-A-0179 - Apple Mac OS X Security Update 2013-004 Severity : Category I - VMSKEY : V0040373
2013-04-11	IAVM : 2013-A-0077 - Multiple Vulnerabilities in OpenSSL Severity : Category I - VMSKEY : V0037605
2013-01-31	IAVM : 2013-A-0027 - Multiple Vulnerabilities in Juniper Networks Steel Belted Radius Severity : Category I - VMSKEY : V0036639
2012-09-27	IAVM : 2012-A-0153 - Multiple Vulnerabilities in VMware ESX 4.0 and ESXi 4.0 Severity : Category I - VMSKEY : V0033884
2012-09-13	IAVM : 2012-A-0148 - Multiple Vulnerabilities in VMware ESXi 4.1 and ESX 4.1 Severity : Category I - VMSKEY : V0033794
2012-04-05	IAVM : 2012-B-0038 - Multiple Vulnerabilities in HP Onboard Administrator Severity : Category I - VMSKEY : V0031972
2011-12-01	IAVM : 2011-A-0160 - Multiple Vulnerabilities in VMware vCenter Server 4.0 and vCenter Update Mana... Severity : Category I - VMSKEY : V0030769
2011-05-12	IAVM : 2011-A-0066 - Multiple Vulnerabilities in VMware Products Severity : Category I - VMSKEY : V0027158

Snort® IPS/IDS

Date	Description
2014-01-10	SSLv3 plaintext recovery attempt RuleID : 25828 - Revision : 4 - Type : SERVER-OTHER
2014-01-10	TLSv1.2 plaintext recovery attempt RuleID : 25827 - Revision : 4 - Type : SERVER-OTHER
2014-01-10	TLSv1.1 plaintext recovery attempt RuleID : 25826 - Revision : 4 - Type : SERVER-OTHER
2014-01-10	TLSv1.0 plaintext recovery attempt RuleID : 25825 - Revision : 4 - Type : SERVER-OTHER

Nessus® Vulnerability Scanner

Date	Description
2018-09-27	Name : The remote Debian host is missing a security update. File : debian_DLA-1518.nasl - Type : ACT_GATHER_INFO
2016-11-21	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL93600123.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-294.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0003_remote.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0013_remote.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_esx_VMSA-2013-0009_remote.nasl - Type : ACT_GATHER_INFO
2016-02-29	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2012-0013_remote.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_gnutls_20130924.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_nss_20140809.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_openssl_20120404.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_openssl_20120523.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_openssl_20120814.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_openssl_20130716.nasl - Type : ACT_GATHER_INFO
2015-01-13	Name : The remote host has a library installed that is affected by an information di... File : tivoli_directory_svr_swg21638270.nasl - Type : ACT_GATHER_INFO
2014-12-22	Name : The remote device is affected by multiple vulnerabilities. File : juniper_space_jsa10659.nasl - Type : ACT_GATHER_INFO
2014-12-05	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-openssl097g-141202.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0007.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0008.nasl - Type : ACT_GATHER_INFO
2014-11-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0109.nasl - Type : ACT_GATHER_INFO
2014-11-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0168.nasl - Type : ACT_GATHER_INFO
2014-11-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0488.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0531.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-0636.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1455.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1456.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0416.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL14190.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL14261.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15388.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15401.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15461.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15630.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15637.nasl - Type : ACT_GATHER_INFO
2014-08-22	Name : The remote host is affected by multiple vulnerabilities. File : juniper_nsm_jsa10642.nasl - Type : ACT_GATHER_INFO
2014-08-11	Name : The remote backup service is affected by multiple vulnerabilities. File : ibm_tsm_server_5_5_x.nasl - Type : ACT_GATHER_INFO
2014-08-11	Name : The remote backup service is affected by multiple vulnerabilities. File : ibm_tsm_server_6_1_x.nasl - Type : ACT_GATHER_INFO
2014-08-11	Name : The remote backup service is affected by multiple vulnerabilities. File : ibm_tsm_server_6_2_6_0.nasl - Type : ACT_GATHER_INFO
2014-08-11	Name : The remote backup service is affected by an information disclosure vulnerabil... File : ibm_tsm_server_6_3_4_200.nasl - Type : ACT_GATHER_INFO
2014-07-14	Name : The remote mail server is affected by an information disclosure vulnerability. File : ipswitch_imail_12_3.nasl - Type : ACT_GATHER_INFO
2014-06-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-32.nasl - Type : ACT_GATHER_INFO
2014-06-18	Name : The remote database server is affected by multiple vulnerabilities. File : db2_101fp3a.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-242.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-308.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-52.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-76.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-153.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-154.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-164.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libopenssl-devel-101119.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libopenssl-devel-101207.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libopenssl-devel-120111.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_curl-120124.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_libopenssl-devel-120111.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_openssl_advisory2.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_openssl_advisory3.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_openssl_advisory4.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_openssl_advisory5.nasl - Type : ACT_GATHER_INFO
2014-01-27	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201401-30.nasl - Type : ACT_GATHER_INFO
2014-01-20	Name : The remote VMware ESXi 5.1 host is affected by multiple vulnerabilities. File : vmware_esxi_5_1_build_1483097_remote.nasl - Type : ACT_GATHER_INFO
2013-12-18	Name : The remote database server is affected by multiple vulnerabilities. File : db2_97fp9.nasl - Type : ACT_GATHER_INFO
2013-12-03	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201312-03.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote VMware ESXi 5.0 host is affected by multiple security vulnerabilit... File : vmware_esxi_5_0_build_1311177_remote.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote VMware ESXi 5.0 host is affected by multiple vulnerabilities. File : vmware_esxi_5_0_build_912577_remote.nasl - Type : ACT_GATHER_INFO
2013-10-18	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201310-10.nasl - Type : ACT_GATHER_INFO
2013-10-16	Name : The remote database server is affected by multiple vulnerabilities. File : oracle_rdbms_cpu_oct_2013.nasl - Type : ACT_GATHER_INFO
2013-09-27	Name : The remote host has an application installed that is affected by multiple Ope... File : juniper_sbr_multiple.nasl - Type : ACT_GATHER_INFO
2013-09-20	Name : The remote application server may be affected by multiple vulnerabilities. File : websphere_6_1_0_47.nasl - Type : ACT_GATHER_INFO
2013-09-19	Name : The remote device is missing a vendor-supplied security patch. File : junos_pulse_jsa10591.nasl - Type : ACT_GATHER_INFO
2013-09-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_10_8_5.nasl - Type : ACT_GATHER_INFO
2013-09-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_SecUpd2013-004.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2012-38.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2012-62.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2012-85.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-162.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-163.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-171.nasl - Type : ACT_GATHER_INFO
2013-08-23	Name : The remote application server may be affected by multiple vulnerabilities. File : websphere_8_0_0_7.nasl - Type : ACT_GATHER_INFO
2013-08-02	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2013-0009.nasl - Type : ACT_GATHER_INFO
2013-07-23	Name : The remote application server may be affected by multiple vulnerabilities. File : websphere_8_5_5.nasl - Type : ACT_GATHER_INFO
2013-07-19	Name : The remote application server is potentially affected by multiple vulnerabili... File : websphere_7_0_0_29.nasl - Type : ACT_GATHER_INFO
2013-07-16	Name : The remote device is missing a vendor-supplied security patch. File : juniper_jsa10575.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0977.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0978.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0979.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0059.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0060.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0086.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0426.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0699.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0273.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0274.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0275.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0587.nasl - Type : ACT_GATHER_INFO
2013-07-10	Name : The remote host has a library installed that is affected by an information di... File : ibm_gskit_swg21638270.nasl - Type : ACT_GATHER_INFO
2013-07-10	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libcurl4-8618.nasl - Type : ACT_GATHER_INFO
2013-06-24	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-0833.nasl - Type : ACT_GATHER_INFO
2013-06-06	Name : The remote web server contains an application that is affected by multiple vu... File : splunk_503.nasl - Type : ACT_GATHER_INFO
2013-06-05	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_10_8_4.nasl - Type : ACT_GATHER_INFO
2013-06-05	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_SecUpd2013-002.nasl - Type : ACT_GATHER_INFO
2013-05-23	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0855.nasl - Type : ACT_GATHER_INFO
2013-05-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0822.nasl - Type : ACT_GATHER_INFO
2013-05-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0823.nasl - Type : ACT_GATHER_INFO
2013-05-10	Name : The remote application server may be affected by multiple vulnerabilities. File : websphere_8_0_0_6.nasl - Type : ACT_GATHER_INFO
2013-05-10	Name : The remote application server may be affected by multiple vulnerabilities. File : websphere_8_5_0_2.nasl - Type : ACT_GATHER_INFO
2013-04-30	Name : The remote host is affected by multiple vulnerabilities. File : ibm_tem_8_2_1372.nasl - Type : ACT_GATHER_INFO
2013-04-24	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-130416.nasl - Type : ACT_GATHER_INFO
2013-04-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_6_0-ibm-8544.nasl - Type : ACT_GATHER_INFO
2013-04-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-050.nasl - Type : ACT_GATHER_INFO
2013-04-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-052.nasl - Type : ACT_GATHER_INFO
2013-04-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-095.nasl - Type : ACT_GATHER_INFO
2013-04-19	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_7_0-ibm-130415.nasl - Type : ACT_GATHER_INFO
2013-04-08	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_69bfc8529bd011e2a7be8c705af55518.nasl - Type : ACT_GATHER_INFO
2013-04-03	Name : The remote Fedora host is missing a security update. File : fedora_2013-4403.nasl - Type : ACT_GATHER_INFO
2013-03-28	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-130325.nasl - Type : ACT_GATHER_INFO
2013-03-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-8517.nasl - Type : ACT_GATHER_INFO
2013-03-26	Name : The remote Windows host contains a program that is affected by multiple vulne... File : stunnel_4_55.nasl - Type : ACT_GATHER_INFO
2013-03-26	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1732-3.nasl - Type : ACT_GATHER_INFO
2013-03-08	Name : The remote Fedora host is missing a security update. File : fedora_2013-2793.nasl - Type : ACT_GATHER_INFO
2013-03-07	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0587.nasl - Type : ACT_GATHER_INFO
2013-03-05	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0587.nasl - Type : ACT_GATHER_INFO
2013-03-05	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130304_openssl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-03-04	Name : The remote Fedora host is missing a security update. File : fedora_2013-2834.nasl - Type : ACT_GATHER_INFO
2013-03-01	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1732-2.nasl - Type : ACT_GATHER_INFO
2013-02-27	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0274.nasl - Type : ACT_GATHER_INFO
2013-02-24	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-014.nasl - Type : ACT_GATHER_INFO
2013-02-24	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-openjdk-130221.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a programming platform that is potentially affe... File : oracle_java_cpu_feb_2013_1_unix.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1732-1.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1735-1.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0273.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0275.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The remote Windows host contains a programming platform that is potentially a... File : oracle_java_cpu_feb_2013_1.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0273.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0274.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0275.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0531.nasl - Type : ACT_GATHER_INFO
2013-02-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0532.nasl - Type : ACT_GATHER_INFO
2013-02-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2621.nasl - Type : ACT_GATHER_INFO
2013-02-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2622.nasl - Type : ACT_GATHER_INFO
2013-02-13	Name : The remote service may be affected by an information disclosure vulnerability. File : openssl_1_0_1e.nasl - Type : ACT_GATHER_INFO
2013-02-11	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2013-040-01.nasl - Type : ACT_GATHER_INFO
2013-02-09	Name : The remote host may be affected by multiple vulnerabilities. File : openssl_0_9_8y.nasl - Type : ACT_GATHER_INFO
2013-02-09	Name : The remote host may be affected by multiple vulnerabilities. File : openssl_1_0_0k.nasl - Type : ACT_GATHER_INFO
2013-02-09	Name : The remote host may be affected by multiple vulnerabilities. File : openssl_1_0_1d.nasl - Type : ACT_GATHER_INFO
2013-02-07	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_00b0d8cd709711e298d9003067c2616f.nasl - Type : ACT_GATHER_INFO
2013-01-25	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-120524.nasl - Type : ACT_GATHER_INFO
2012-11-26	Name : The remote Fedora host is missing a security update. File : fedora_2012-18035.nasl - Type : ACT_GATHER_INFO
2012-09-06	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-007.nasl - Type : ACT_GATHER_INFO
2012-08-31	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2012-0013.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101116_openssl_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101213_openssl_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101213_openssl_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120124_openssl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120124_openssl_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120201_openssl_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120327_openssl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120529_openssl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-07-05	Name : The remote web server is affected by multiple vulnerabilities. File : hpsmh_7_1_1_1.nasl - Type : ACT_GATHER_INFO
2012-06-28	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_2ae114dec06411e1b5e0000c299b62e1.nasl - Type : ACT_GATHER_INFO
2012-06-04	Name : The remote Fedora host is missing a security update. File : fedora_2012-8014.nasl - Type : ACT_GATHER_INFO
2012-06-04	Name : The remote Fedora host is missing a security update. File : fedora_2012-8024.nasl - Type : ACT_GATHER_INFO
2012-05-31	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-8143.nasl - Type : ACT_GATHER_INFO
2012-05-30	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0699.nasl - Type : ACT_GATHER_INFO
2012-05-30	Name : The remote Fedora host is missing a security update. File : fedora_2012-7939.nasl - Type : ACT_GATHER_INFO
2012-05-30	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0699.nasl - Type : ACT_GATHER_INFO
2012-05-29	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1451-1.nasl - Type : ACT_GATHER_INFO
2012-05-18	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2475.nasl - Type : ACT_GATHER_INFO
2012-05-16	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_dba5d1c99f2911e1b511003067c2616f.nasl - Type : ACT_GATHER_INFO
2012-05-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-073.nasl - Type : ACT_GATHER_INFO
2012-05-11	Name : The remote host may be affected by a denial of service vulnerability. File : openssl_0_9_8x.nasl - Type : ACT_GATHER_INFO
2012-05-11	Name : The remote host may be affected by a denial of service vulnerability. File : openssl_1_0_0j.nasl - Type : ACT_GATHER_INFO
2012-05-11	Name : The remote host may be affected by a denial of service vulnerability. File : openssl_1_0_1c.nasl - Type : ACT_GATHER_INFO
2012-04-20	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2454.nasl - Type : ACT_GATHER_INFO
2012-04-12	Name : The remote Fedora host is missing a security update. File : fedora_2012-4630.nasl - Type : ACT_GATHER_INFO
2012-04-12	Name : The remote Fedora host is missing a security update. File : fedora_2012-4659.nasl - Type : ACT_GATHER_INFO
2012-04-11	Name : The remote Fedora host is missing a security update. File : fedora_2012-4665.nasl - Type : ACT_GATHER_INFO
2012-04-11	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-120327.nasl - Type : ACT_GATHER_INFO
2012-04-11	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-120328.nasl - Type : ACT_GATHER_INFO
2012-04-02	Name : The remote host may be affected by multiple vulnerabilities. File : openssl_0_9_8u.nasl - Type : ACT_GATHER_INFO
2012-04-02	Name : The remote host may be affected by multiple vulnerabilities. File : openssl_1_0_0h.nasl - Type : ACT_GATHER_INFO
2012-03-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0426.nasl - Type : ACT_GATHER_INFO
2012-03-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0426.nasl - Type : ACT_GATHER_INFO
2012-03-27	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-038.nasl - Type : ACT_GATHER_INFO
2012-03-16	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_60eb344e6eb111e18ad700e0815b8da8.nasl - Type : ACT_GATHER_INFO
2012-03-06	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201203-12.nasl - Type : ACT_GATHER_INFO
2012-02-10	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1357-1.nasl - Type : ACT_GATHER_INFO
2012-02-03	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0086.nasl - Type : ACT_GATHER_INFO
2012-02-02	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0086.nasl - Type : ACT_GATHER_INFO
2012-01-31	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0059.nasl - Type : ACT_GATHER_INFO
2012-01-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-011.nasl - Type : ACT_GATHER_INFO
2012-01-27	Name : The remote host may be affected by a denial of service vulnerability. File : openssl_0_9_8t.nasl - Type : ACT_GATHER_INFO
2012-01-27	Name : The remote host may be affected by a denial of service vulnerability. File : openssl_1_0_0g.nasl - Type : ACT_GATHER_INFO
2012-01-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0060.nasl - Type : ACT_GATHER_INFO
2012-01-25	Name : The remote Fedora host is missing a security update. File : fedora_2012-0702.nasl - Type : ACT_GATHER_INFO
2012-01-25	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0059.nasl - Type : ACT_GATHER_INFO
2012-01-25	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0060.nasl - Type : ACT_GATHER_INFO
2012-01-23	Name : The remote Fedora host is missing a security update. File : fedora_2012-0708.nasl - Type : ACT_GATHER_INFO
2012-01-23	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_5c5f19ce43af11e189b4001ec9578670.nasl - Type : ACT_GATHER_INFO
2012-01-17	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-006.nasl - Type : ACT_GATHER_INFO
2012-01-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-120111.nasl - Type : ACT_GATHER_INFO
2012-01-17	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-7923.nasl - Type : ACT_GATHER_INFO
2012-01-16	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2390.nasl - Type : ACT_GATHER_INFO
2012-01-16	Name : The remote Fedora host is missing a security update. File : fedora_2012-0250.nasl - Type : ACT_GATHER_INFO
2012-01-16	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_78cc8a463e5611e189b4001ec9578670.nasl - Type : ACT_GATHER_INFO
2012-01-11	Name : The remote Fedora host is missing a security update. File : fedora_2012-0232.nasl - Type : ACT_GATHER_INFO
2012-01-09	Name : The remote web server has multiple SSL-related vulnerabilities. File : openssl_0_9_8s.nasl - Type : ACT_GATHER_INFO
2012-01-09	Name : The remote web server is affected by multiple SSL-related vulnerabilities. File : openssl_1_0_0f.nasl - Type : ACT_GATHER_INFO
2012-01-04	Name : The remote server is affected by a buffer overflow vulnerability. File : openssl_0_9_8p_1_0_0b.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7645.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-7462.nasl - Type : ACT_GATHER_INFO
2011-10-28	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0013.nasl - Type : ACT_GATHER_INFO
2011-10-10	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-01.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7644.nasl - Type : ACT_GATHER_INFO
2011-06-24	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_10_6_8.nasl - Type : ACT_GATHER_INFO
2011-05-13	Name : The remote media server is affected by multiple vulnerabilities. File : adobe_fms_4_0_2.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libopenssl-devel-101111.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libopenssl-devel-101207.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libopenssl-devel-101119.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libopenssl-devel-101207.nasl - Type : ACT_GATHER_INFO
2011-05-04	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12701.nasl - Type : ACT_GATHER_INFO
2011-05-04	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-7463.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0003.nasl - Type : ACT_GATHER_INFO
2011-02-07	Name : The remote host allows resuming SSL sessions with a weaker cipher than the on... File : openssl_resume_different_cipher.nasl - Type : ACT_ATTACK
2011-01-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0977.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-101116.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-101207.nasl - Type : ACT_GATHER_INFO
2011-01-10	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2141.nasl - Type : ACT_GATHER_INFO
2010-12-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-18736.nasl - Type : ACT_GATHER_INFO
2010-12-14	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0978.nasl - Type : ACT_GATHER_INFO
2010-12-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0977.nasl - Type : ACT_GATHER_INFO
2010-12-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0978.nasl - Type : ACT_GATHER_INFO
2010-12-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0979.nasl - Type : ACT_GATHER_INFO
2010-12-12	Name : The remote Fedora host is missing a security update. File : fedora_2010-18765.nasl - Type : ACT_GATHER_INFO
2010-12-08	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-340-01.nasl - Type : ACT_GATHER_INFO
2010-12-08	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-248.nasl - Type : ACT_GATHER_INFO
2010-12-08	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1029-1.nasl - Type : ACT_GATHER_INFO
2010-12-07	Name : The remote web server is affected by multiple vulnerabilities. File : openssl_1_0_0c.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-101111.nasl - Type : ACT_GATHER_INFO
2010-11-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2125.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-326-01.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Fedora host is missing a security update. File : fedora_2010-17826.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Fedora host is missing a security update. File : fedora_2010-17827.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Fedora host is missing a security update. File : fedora_2010-17847.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_3042c33af23711df9d020018fe623f2b.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-238.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0888.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1018-1.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2016-03-05 13:26:43	Multiple Updates
2014-08-23 13:27:51	Multiple Updates
2014-04-17 13:25:51	Multiple Updates
2013-03-19 13:19:20	Multiple Updates
2013-03-19 13:17:25	Multiple Updates
2013-03-19 00:17:28	First insertion

Global Informations

Type	Count
CWE ID(s)	10
Oval ID(s)	94
CPE ID(s)	756
osvdb(s)	7
Openvas Exploit(s)	69
IAVM(s)	11
Snort® Rule(s)	4
Nessus® Exploit(s)	250

	Related
9.3	CVE-2011-4109
7.6	CVE-2010-3864
6.8	CVE-2012-2333
5	CVE-2013-0166
5	CVE-2012-0884
5	CVE-2011-4619
5	CVE-2011-4576
4.3	CVE-2011-4577
4.3	CVE-2011-4108
4.3	CVE-2010-4180
2.6	CVE-2013-0169
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 11 more Alert(s)