4.3 - CVE-2010-4180

Executive Summary

Informations
Name	CVE-2010-4180	First vendor Publication	2010-12-06
Vendor	Cve	Last vendor Modification	2022-08-04

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12481

Oval ID:	oval:org.mitre.oval:def:12481
Title:	DSA-2141-4 lighttpd -- compatibility problem with updated openssl
Description:	The openssl update in DSA-2141-1 caused a regression in lighttpd. Due to a bug in lighttpd, the server fails to start in some configurations if using the updated openssl libraries. This update fixes this problem.
Family:	unix	Class:	patch
Reference(s):	DSA-2141-4 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	lighttpd
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND lighttpd DPKG is earlier than 1.4.19-5+lenny2

Definition Id: oval:org.mitre.oval:def:12573

Oval ID:	oval:org.mitre.oval:def:12573
Title:	DSA-2141-3 apache2 -- backward compatibility option for SSL/TLS insecure
Description:	DSA-2141-1 changed the behaviour of the openssl libraries in a server environment to only allow SSL/TLS renegotiation for clients that support the RFC5746 renegotiation extension. This update to apache2 adds the new SSLInsecureRenegotiation configuration option that allows to restore support for insecure clients. More information can be found in the file /usr/share/doc/apache2.2-common/NEWS.Debian.gz .
Family:	unix	Class:	patch
Reference(s):	DSA-2141-3 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	apache2
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.9-10+lenny9

Definition Id: oval:org.mitre.oval:def:12707

Oval ID:	oval:org.mitre.oval:def:12707
Title:	DSA-2141-1 openssl -- SSL/TLS insecure renegotiation protocol design flaw
Description:	CVE-2009-3555: Marsh Ray, Steve Dispensa, and Martin Rex discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user's session. This update adds backported support for the new RFC5746 renegotiation extension which fixes this issue. If openssl is used in a server application, it will by default no longer accept renegotiation from clients that do not support the RFC5746 secure renegotiation extension. A separate advisory will add RFC5746 support for nss, the security library used by the iceweasel web browser. For apache2, there will be an update which allows to re-enable insecure renegotiation. This version of openssl is not compatible with older versions of tor. You have to use at least tor version 0.2.1.26-1~lenny+1, which has been included in the point release 5.0.7 of Debian stable. Currently we are not aware of other software with similar compatibility problems. CVE-2010-4180: In addition, this update fixes a flaw that allowed a client to bypass restrictions configured in the server for the used cipher suite.
Family:	unix	Class:	patch
Reference(s):	DSA-2141-1 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	openssl
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8g-15+lenny11

Definition Id: oval:org.mitre.oval:def:12801

Oval ID:	oval:org.mitre.oval:def:12801
Title:	DSA-2141-2 nss -- SSL/TLS insecure renegotiation protocol design flaw
Description:	CVE-2009-3555: Marsh Ray, Steve Dispensa, and Martin Rex discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user's session. This update adds backported support for the new RFC5746 renegotiation extension which fixes this issue. The updated libraries allow to use shell environment variables to configure if insecure renegotiation is still allowed. The syntax of these environment variables is described in the release notes to version 3.12.6 of nss: https://developer.mozilla.org/NSS_3.12.6_release_notes However, the default behaviour for nss in Debian 5.0 is NSS_SSL_ENABLE_RENEGOTIATION=3, which allows clients to continue to renegotiate with vulnerable servers.
Family:	unix	Class:	patch
Reference(s):	DSA-2141-2 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	nss
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND nss DPKG is earlier than 3.12.3.1-0lenny3

Definition Id: oval:org.mitre.oval:def:18910

Oval ID:	oval:org.mitre.oval:def:18910
Title:	OpenSSL vulnerability before 0.9.8q, and 1.0.x before 1.0.0c in VisualSVN Server (CVE-2010-4180)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	5
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	VisualSVN Server
Definition Synopsis:
VisualSVN Server is installed If the version of OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c in VisualSVN Server Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.8.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.8.16 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.7.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.7.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.6.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 1.0.0.0 in VisualSVN Server AND Check if OpenSSL is less than 1.0.0.3 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.1.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.2.2 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.4.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.1 in VisualSVN Server

Definition Id: oval:org.mitre.oval:def:19547

Oval ID:	oval:org.mitre.oval:def:19547
Title:	HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, Denial of Service (DoS), Authentication Bypass
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.001 AND openssl.OPENSSL-INC version is less than A.00.09.08q.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.001 OR Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.002 AND openssl.OPENSSL-INC version is less than A.00.09.08q.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.002 OR Criteria meets HP Security Bulletin HPSBUX02638 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.003 AND openssl.OPENSSL-INC version is less than A.00.09.08q.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.003

Definition Id: oval:org.mitre.oval:def:19752

Oval ID:	oval:org.mitre.oval:def:19752
Title:	VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201110204-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201110204-SG is not installed OR Patch ESX400-201203401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201203401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20705

Oval ID:	oval:org.mitre.oval:def:20705
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20828

Oval ID:	oval:org.mitre.oval:def:20828
Title:	Multiple OpenSSL vulnerabilities
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than 0.9.8.1301 AND OpenSSL-fips.base less than 12.9.8.1301

Definition Id: oval:org.mitre.oval:def:22038

Oval ID:	oval:org.mitre.oval:def:22038
Title:	RHSA-2010:0978: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0978-01 CESA-2010:0978 CVE-2008-7270 CVE-2010-4180	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	openssl
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section openssl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-perl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-devel is earlier than 0:0.9.8e-12.el5_5.7

Definition Id: oval:org.mitre.oval:def:22097

Oval ID:	oval:org.mitre.oval:def:22097
Title:	RHSA-2010:0979: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0979-01 CVE-2010-4180	Version:	4
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	openssl
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section openssl-devel is earlier than 0:1.0.0-4.el6_0.2 AND openssl-static is earlier than 0:1.0.0-4.el6_0.2 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.2 AND openssl is earlier than 0:1.0.0-4.el6_0.2

Definition Id: oval:org.mitre.oval:def:22306

Oval ID:	oval:org.mitre.oval:def:22306
Title:	ELSA-2010:0978: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0978-01 CVE-2008-7270 CVE-2010-4180	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x rpm test openssl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-perl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-devel is earlier than 0:0.9.8e-12.el5_5.7

Definition Id: oval:org.mitre.oval:def:22780

Oval ID:	oval:org.mitre.oval:def:22780
Title:	ELSA-2010:0979: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0979-01 CVE-2010-4180	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x rpm test openssl-devel is earlier than 0:1.0.0-4.el6_0.2 AND openssl-static is earlier than 0:1.0.0-4.el6_0.2 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.2 AND openssl is earlier than 0:1.0.0-4.el6_0.2

Definition Id: oval:org.mitre.oval:def:24969

Oval ID:	oval:org.mitre.oval:def:24969
Title:	Vulnerability in OpenSSL 0.9.8q, and 1.0.x before 1.0.0c, does not properly prevent modification of the ciphersuite in the session cache
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.1c before 0.9.8r AND Check if the version of OpenSSL 1.0.0 before 1.0.0c AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.1c before 0.9.8r (32_bit) AND Check if the version of OpenSSL 1.0.0 before 1.0.0c (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8r ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8r ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8r under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25193

Oval ID:	oval:org.mitre.oval:def:25193
Title:	SUSE-SU-2013:1165-1 -- Security update for libcurl4
Description:	This update of curl fixes several security issues: * libcurl URL decode buffer boundary flaw (bnc#824517 / CVE-2013-2174) * cookie domain tailmatch (bnc#814655 / CVE-2013-1944) * curl sets SSL_OP_ALL (bnc#742306 / CVE-2011-3389) * When SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier (CVE-2010-4180)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1165-1 CVE-2013-2174 CVE-2013-1944 CVE-2011-3389 CVE-2010-4180	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 10	Product(s):	libcurl4
Definition Synopsis:
SUSE Linux Enterprise Desktop 10 is installed Packages match section libcurl4-32bit RPM is earlier than 0:7.19.0-11.6.1 AND libcurl4 RPM is earlier than 0:7.19.0-11.6.1

Definition Id: oval:org.mitre.oval:def:28187

Oval ID:	oval:org.mitre.oval:def:28187
Title:	DEPRECATED: ELSA-2010-0979 -- openssl security update (moderate)
Description:	[1.0.0-4.2] - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG - CVE-2010-3864 (#649304) [1.0.0-4.1] - fix race in extension parsing code - CVE-2010-3864 (#649304)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0979 CVE-2010-3864 CVE-2010-4180	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x Packages match section openssl is earlier than 0:1.0.0-4.el6_0.2 AND openssl-devel is earlier than 0:1.0.0-4.el6_0.2 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.2 AND openssl-static is earlier than 0:1.0.0-4.el6_0.2

CPE : Common Platform Enumeration

Type	Description	Count
Application	f5 Nginx cpe:2.3:a:f5:nginx:0.9.1:::::::* cpe:2.3:a:f5:nginx:0.9.0:::::::* cpe:2.3:a:f5:nginx:0.8.9:::::::* cpe:2.3:a:f5:nginx:0.8.8:::::::* cpe:2.3:a:f5:nginx:0.8.7:::::::* cpe:2.3:a:f5:nginx:0.8.6:::::::* cpe:2.3:a:f5:nginx:0.8.55:::::::* cpe:2.3:a:f5:nginx:0.8.54:::::::* cpe:2.3:a:f5:nginx:0.8.53:::::::* cpe:2.3:a:f5:nginx:0.8.52:::::::* cpe:2.3:a:f5:nginx:0.8.51:::::::* cpe:2.3:a:f5:nginx:0.8.50:::::::* cpe:2.3:a:f5:nginx:0.8.5:::::::* cpe:2.3:a:f5:nginx:0.8.49:::::::* cpe:2.3:a:f5:nginx:0.8.48:::::::* cpe:2.3:a:f5:nginx:0.8.47:::::::* cpe:2.3:a:f5:nginx:0.8.46:::::::* cpe:2.3:a:f5:nginx:0.8.45:::::::* cpe:2.3:a:f5:nginx:0.8.44:::::::* cpe:2.3:a:f5:nginx:0.8.43:::::::* cpe:2.3:a:f5:nginx:0.8.42:::::::* cpe:2.3:a:f5:nginx:0.8.41:::::::* cpe:2.3:a:f5:nginx:0.8.40:::::::* cpe:2.3:a:f5:nginx:0.8.4:::::::* cpe:2.3:a:f5:nginx:0.8.39:::::::* cpe:2.3:a:f5:nginx:0.8.38:::::::* cpe:2.3:a:f5:nginx:0.8.37:::::::* cpe:2.3:a:f5:nginx:0.8.36:::::::* cpe:2.3:a:f5:nginx:0.8.35:::::::* cpe:2.3:a:f5:nginx:0.8.34:::::::* cpe:2.3:a:f5:nginx:0.8.33:::::::* cpe:2.3:a:f5:nginx:0.8.32:::::::* cpe:2.3:a:f5:nginx:0.8.31:::::::* cpe:2.3:a:f5:nginx:0.8.30:::::::* cpe:2.3:a:f5:nginx:0.8.3:::::::* cpe:2.3:a:f5:nginx:0.8.29:::::::* cpe:2.3:a:f5:nginx:0.8.28:::::::* cpe:2.3:a:f5:nginx:0.8.27:::::::* cpe:2.3:a:f5:nginx:0.8.26:::::::* cpe:2.3:a:f5:nginx:0.8.25:::::::* cpe:2.3:a:f5:nginx:0.8.24:::::::* cpe:2.3:a:f5:nginx:0.8.23:::::::* cpe:2.3:a:f5:nginx:0.8.22:::::::* cpe:2.3:a:f5:nginx:0.8.21:::::::* cpe:2.3:a:f5:nginx:0.8.20:::::::* cpe:2.3:a:f5:nginx:0.8.2:::::::* cpe:2.3:a:f5:nginx:0.8.19:::::::* cpe:2.3:a:f5:nginx:0.8.18:::::::* cpe:2.3:a:f5:nginx:0.8.17:::::::* cpe:2.3:a:f5:nginx:0.8.16:::::::* cpe:2.3:a:f5:nginx:0.8.15:::::::* cpe:2.3:a:f5:nginx:0.8.14:::::::* cpe:2.3:a:f5:nginx:0.8.13:::::::* cpe:2.3:a:f5:nginx:0.8.12:::::::* cpe:2.3:a:f5:nginx:0.8.11:::::::* cpe:2.3:a:f5:nginx:0.8.10:::::::* cpe:2.3:a:f5:nginx:0.8.1:::::::* cpe:2.3:a:f5:nginx:0.8.0:::::::* cpe:2.3:a:f5:nginx:0.7.9:::::::* cpe:2.3:a:f5:nginx:0.7.8:::::::* cpe:2.3:a:f5:nginx:0.7.7:::::::* cpe:2.3:a:f5:nginx:0.7.69:::::::* cpe:2.3:a:f5:nginx:0.7.68:::::::* cpe:2.3:a:f5:nginx:0.7.67:::::::* cpe:2.3:a:f5:nginx:0.7.66:::::::* cpe:2.3:a:f5:nginx:0.7.65:::::::* cpe:2.3:a:f5:nginx:0.7.64:::::::* cpe:2.3:a:f5:nginx:0.7.63:::::::* cpe:2.3:a:f5:nginx:0.7.62:::::::* cpe:2.3:a:f5:nginx:0.7.61:::::::* cpe:2.3:a:f5:nginx:0.7.60:::::::* cpe:2.3:a:f5:nginx:0.7.6:::::::* cpe:2.3:a:f5:nginx:0.7.59:::::::* cpe:2.3:a:f5:nginx:0.7.58:::::::* cpe:2.3:a:f5:nginx:0.7.57:::::::* cpe:2.3:a:f5:nginx:0.7.56:::::::* cpe:2.3:a:f5:nginx:0.7.55:::::::* cpe:2.3:a:f5:nginx:0.7.54:::::::* cpe:2.3:a:f5:nginx:0.7.53:::::::* cpe:2.3:a:f5:nginx:0.7.52:::::::* cpe:2.3:a:f5:nginx:0.7.51:::::::* cpe:2.3:a:f5:nginx:0.7.50:::::::* cpe:2.3:a:f5:nginx:0.7.5:::::::* cpe:2.3:a:f5:nginx:0.7.49:::::::* cpe:2.3:a:f5:nginx:0.7.48:::::::* cpe:2.3:a:f5:nginx:0.7.47:::::::* cpe:2.3:a:f5:nginx:0.7.46:::::::* cpe:2.3:a:f5:nginx:0.7.45:::::::* cpe:2.3:a:f5:nginx:0.7.44:::::::* cpe:2.3:a:f5:nginx:0.7.43:::::::* cpe:2.3:a:f5:nginx:0.7.42:::::::* cpe:2.3:a:f5:nginx:0.7.41:::::::* cpe:2.3:a:f5:nginx:0.7.40:::::::* cpe:2.3:a:f5:nginx:0.7.4:::::::* cpe:2.3:a:f5:nginx:0.7.39:::::::* cpe:2.3:a:f5:nginx:0.7.38:::::::* cpe:2.3:a:f5:nginx:0.7.37:::::::* cpe:2.3:a:f5:nginx:0.7.36:::::::* cpe:2.3:a:f5:nginx:0.7.35:::::::* cpe:2.3:a:f5:nginx:0.7.34:::::::* cpe:2.3:a:f5:nginx:0.7.33:::::::* cpe:2.3:a:f5:nginx:0.7.32:::::::* cpe:2.3:a:f5:nginx:0.7.31:::::::* cpe:2.3:a:f5:nginx:0.7.30:::::::* cpe:2.3:a:f5:nginx:0.7.3:::::::* cpe:2.3:a:f5:nginx:0.7.29:::::::* cpe:2.3:a:f5:nginx:0.7.28:::::::* cpe:2.3:a:f5:nginx:0.7.27:::::::* cpe:2.3:a:f5:nginx:0.7.26:::::::* cpe:2.3:a:f5:nginx:0.7.25:::::::* cpe:2.3:a:f5:nginx:0.7.24:::::::* cpe:2.3:a:f5:nginx:0.7.23:::::::* cpe:2.3:a:f5:nginx:0.7.22:::::::* cpe:2.3:a:f5:nginx:0.7.21:::::::* cpe:2.3:a:f5:nginx:0.7.20:::::::* cpe:2.3:a:f5:nginx:0.7.2:::::::* cpe:2.3:a:f5:nginx:0.7.19:::::::* cpe:2.3:a:f5:nginx:0.7.18:::::::* cpe:2.3:a:f5:nginx:0.7.17:::::::* cpe:2.3:a:f5:nginx:0.7.16:::::::* cpe:2.3:a:f5:nginx:0.7.15:::::::* cpe:2.3:a:f5:nginx:0.7.14:::::::* cpe:2.3:a:f5:nginx:0.7.13:::::::* cpe:2.3:a:f5:nginx:0.7.12:::::::* cpe:2.3:a:f5:nginx:0.7.11:::::::* cpe:2.3:a:f5:nginx:0.7.10:::::::* cpe:2.3:a:f5:nginx:0.7.1:::::::* cpe:2.3:a:f5:nginx:0.7.0:::::::* cpe:2.3:a:f5:nginx:0.6.9:::::::* cpe:2.3:a:f5:nginx:0.6.8:::::::* cpe:2.3:a:f5:nginx:0.6.7:::::::* cpe:2.3:a:f5:nginx:0.6.6:::::::* cpe:2.3:a:f5:nginx:0.6.5:::::::* cpe:2.3:a:f5:nginx:0.6.4:::::::* cpe:2.3:a:f5:nginx:0.6.39:::::::* cpe:2.3:a:f5:nginx:0.6.38:::::::* cpe:2.3:a:f5:nginx:0.6.37:::::::* cpe:2.3:a:f5:nginx:0.6.36:::::::* cpe:2.3:a:f5:nginx:0.6.35:::::::* cpe:2.3:a:f5:nginx:0.6.34:::::::* cpe:2.3:a:f5:nginx:0.6.33:::::::* cpe:2.3:a:f5:nginx:0.6.32:::::::* cpe:2.3:a:f5:nginx:0.6.31:::::::* cpe:2.3:a:f5:nginx:0.6.30:::::::* cpe:2.3:a:f5:nginx:0.6.3:::::::* cpe:2.3:a:f5:nginx:0.6.29:::::::* cpe:2.3:a:f5:nginx:0.6.28:::::::* cpe:2.3:a:f5:nginx:0.6.27:::::::* cpe:2.3:a:f5:nginx:0.6.26:::::::* cpe:2.3:a:f5:nginx:0.6.25:::::::* cpe:2.3:a:f5:nginx:0.6.24:::::::* cpe:2.3:a:f5:nginx:0.6.23:::::::* cpe:2.3:a:f5:nginx:0.6.22:::::::* cpe:2.3:a:f5:nginx:0.6.21:::::::* cpe:2.3:a:f5:nginx:0.6.20:::::::* cpe:2.3:a:f5:nginx:0.6.2:::::::* cpe:2.3:a:f5:nginx:0.6.19:::::::* cpe:2.3:a:f5:nginx:0.6.18:::::::* cpe:2.3:a:f5:nginx:0.6.17:::::::* cpe:2.3:a:f5:nginx:0.6.16:::::::* cpe:2.3:a:f5:nginx:0.6.15:::::::* cpe:2.3:a:f5:nginx:0.6.14:::::::* cpe:2.3:a:f5:nginx:0.6.13:::::::* cpe:2.3:a:f5:nginx:0.6.12:::::::* cpe:2.3:a:f5:nginx:0.6.11:::::::* cpe:2.3:a:f5:nginx:0.6.10:::::::* cpe:2.3:a:f5:nginx:0.6.1:::::::* cpe:2.3:a:f5:nginx:0.6.0:::::::* cpe:2.3:a:f5:nginx:0.5.9:::::::* cpe:2.3:a:f5:nginx:0.5.8:::::::* cpe:2.3:a:f5:nginx:0.5.7:::::::* cpe:2.3:a:f5:nginx:0.5.6:::::::* cpe:2.3:a:f5:nginx:0.5.5:::::::* cpe:2.3:a:f5:nginx:0.5.4:::::::* cpe:2.3:a:f5:nginx:0.5.38:::::::* cpe:2.3:a:f5:nginx:0.5.37:::::::* cpe:2.3:a:f5:nginx:0.5.36:::::::* cpe:2.3:a:f5:nginx:0.5.35:::::::* cpe:2.3:a:f5:nginx:0.5.34:::::::* cpe:2.3:a:f5:nginx:0.5.33:::::::* cpe:2.3:a:f5:nginx:0.5.32:::::::* cpe:2.3:a:f5:nginx:0.5.31:::::::* cpe:2.3:a:f5:nginx:0.5.30:::::::* cpe:2.3:a:f5:nginx:0.5.3:::::::* cpe:2.3:a:f5:nginx:0.5.29:::::::* cpe:2.3:a:f5:nginx:0.5.28:::::::* cpe:2.3:a:f5:nginx:0.5.27:::::::* cpe:2.3:a:f5:nginx:0.5.26:::::::* cpe:2.3:a:f5:nginx:0.5.25:::::::* cpe:2.3:a:f5:nginx:0.5.24:::::::* cpe:2.3:a:f5:nginx:0.5.23:::::::* cpe:2.3:a:f5:nginx:0.5.22:::::::* cpe:2.3:a:f5:nginx:0.5.21:::::::* cpe:2.3:a:f5:nginx:0.5.20:::::::* cpe:2.3:a:f5:nginx:0.5.2:::::::* cpe:2.3:a:f5:nginx:0.5.19:::::::* cpe:2.3:a:f5:nginx:0.5.18:::::::* cpe:2.3:a:f5:nginx:0.5.17:::::::* cpe:2.3:a:f5:nginx:0.5.16:::::::* cpe:2.3:a:f5:nginx:0.5.15:::::::* cpe:2.3:a:f5:nginx:0.5.14:::::::* cpe:2.3:a:f5:nginx:0.5.13:::::::* cpe:2.3:a:f5:nginx:0.5.12:::::::* cpe:2.3:a:f5:nginx:0.5.11:::::::* cpe:2.3:a:f5:nginx:0.5.10:::::::* cpe:2.3:a:f5:nginx:0.5.1:::::::* cpe:2.3:a:f5:nginx:0.5.0:::::::* cpe:2.3:a:f5:nginx:0.4.9:::::::* cpe:2.3:a:f5:nginx:0.4.8:::::::* cpe:2.3:a:f5:nginx:0.4.7:::::::* cpe:2.3:a:f5:nginx:0.4.6:::::::* cpe:2.3:a:f5:nginx:0.4.5:::::::* cpe:2.3:a:f5:nginx:0.4.4:::::::* cpe:2.3:a:f5:nginx:0.4.3:::::::* cpe:2.3:a:f5:nginx:0.4.2:::::::* cpe:2.3:a:f5:nginx:0.4.14:::::::* cpe:2.3:a:f5:nginx:0.4.13:::::::* cpe:2.3:a:f5:nginx:0.4.12:::::::* cpe:2.3:a:f5:nginx:0.4.11:::::::* cpe:2.3:a:f5:nginx:0.4.10:::::::* cpe:2.3:a:f5:nginx:0.4.1:::::::* cpe:2.3:a:f5:nginx:0.4.0:::::::* cpe:2.3:a:f5:nginx:0.3.9:::::::* cpe:2.3:a:f5:nginx:0.3.8:::::::* cpe:2.3:a:f5:nginx:0.3.7:::::::* cpe:2.3:a:f5:nginx:0.3.61:::::::* cpe:2.3:a:f5:nginx:0.3.60:::::::* cpe:2.3:a:f5:nginx:0.3.6:::::::* cpe:2.3:a:f5:nginx:0.3.59:::::::* cpe:2.3:a:f5:nginx:0.3.58:::::::* cpe:2.3:a:f5:nginx:0.3.57:::::::* cpe:2.3:a:f5:nginx:0.3.56:::::::* cpe:2.3:a:f5:nginx:0.3.55:::::::* cpe:2.3:a:f5:nginx:0.3.54:::::::* cpe:2.3:a:f5:nginx:0.3.53:::::::* cpe:2.3:a:f5:nginx:0.3.52:::::::* cpe:2.3:a:f5:nginx:0.3.51:::::::* cpe:2.3:a:f5:nginx:0.3.50:::::::* cpe:2.3:a:f5:nginx:0.3.5:::::::* cpe:2.3:a:f5:nginx:0.3.49:::::::* cpe:2.3:a:f5:nginx:0.3.48:::::::* cpe:2.3:a:f5:nginx:0.3.47:::::::* cpe:2.3:a:f5:nginx:0.3.46:::::::* cpe:2.3:a:f5:nginx:0.3.45:::::::* cpe:2.3:a:f5:nginx:0.3.44:::::::* cpe:2.3:a:f5:nginx:0.3.43:::::::* cpe:2.3:a:f5:nginx:0.3.42:::::::* cpe:2.3:a:f5:nginx:0.3.41:::::::* cpe:2.3:a:f5:nginx:0.3.40:::::::* cpe:2.3:a:f5:nginx:0.3.4:::::::* cpe:2.3:a:f5:nginx:0.3.39:::::::* cpe:2.3:a:f5:nginx:0.3.38:::::::* cpe:2.3:a:f5:nginx:0.3.37:::::::* cpe:2.3:a:f5:nginx:0.3.36:::::::* cpe:2.3:a:f5:nginx:0.3.35:::::::* cpe:2.3:a:f5:nginx:0.3.34:::::::* cpe:2.3:a:f5:nginx:0.3.33:::::::* cpe:2.3:a:f5:nginx:0.3.32:::::::* cpe:2.3:a:f5:nginx:0.3.31:::::::* cpe:2.3:a:f5:nginx:0.3.30:::::::* cpe:2.3:a:f5:nginx:0.3.3:::::::* cpe:2.3:a:f5:nginx:0.3.29:::::::* cpe:2.3:a:f5:nginx:0.3.28:::::::* cpe:2.3:a:f5:nginx:0.3.27:::::::* cpe:2.3:a:f5:nginx:0.3.26:::::::* cpe:2.3:a:f5:nginx:0.3.25:::::::* cpe:2.3:a:f5:nginx:0.3.24:::::::* cpe:2.3:a:f5:nginx:0.3.23:::::::* cpe:2.3:a:f5:nginx:0.3.22:::::::* cpe:2.3:a:f5:nginx:0.3.21:::::::* cpe:2.3:a:f5:nginx:0.3.20:::::::* cpe:2.3:a:f5:nginx:0.3.2:::::::* cpe:2.3:a:f5:nginx:0.3.19:::::::* cpe:2.3:a:f5:nginx:0.3.18:::::::* cpe:2.3:a:f5:nginx:0.3.17:::::::* cpe:2.3:a:f5:nginx:0.3.16:::::::* cpe:2.3:a:f5:nginx:0.3.15:::::::* cpe:2.3:a:f5:nginx:0.3.14:::::::* cpe:2.3:a:f5:nginx:0.3.13:::::::* cpe:2.3:a:f5:nginx:0.3.12:::::::* cpe:2.3:a:f5:nginx:0.3.11:::::::* cpe:2.3:a:f5:nginx:0.3.10:::::::* cpe:2.3:a:f5:nginx:0.3.1:::::::* cpe:2.3:a:f5:nginx:0.3.0:::::::* cpe:2.3:a:f5:nginx:0.2.6:::::::* cpe:2.3:a:f5:nginx:0.2.5:::::::* cpe:2.3:a:f5:nginx:0.2.4:::::::* cpe:2.3:a:f5:nginx:0.2.3:::::::* cpe:2.3:a:f5:nginx:0.2.2:::::::* cpe:2.3:a:f5:nginx:0.2.1:::::::* cpe:2.3:a:f5:nginx:0.2.0:::::::* cpe:2.3:a:f5:nginx:0.1.9:::::::* cpe:2.3:a:f5:nginx:0.1.8:::::::* cpe:2.3:a:f5:nginx:0.1.7:::::::* cpe:2.3:a:f5:nginx:0.1.6:::::::* cpe:2.3:a:f5:nginx:0.1.5:::::::* cpe:2.3:a:f5:nginx:0.1.45:::::::* cpe:2.3:a:f5:nginx:0.1.44:::::::* cpe:2.3:a:f5:nginx:0.1.43:::::::* cpe:2.3:a:f5:nginx:0.1.42:::::::* cpe:2.3:a:f5:nginx:0.1.41:::::::* cpe:2.3:a:f5:nginx:0.1.40:::::::* cpe:2.3:a:f5:nginx:0.1.4:::::::* cpe:2.3:a:f5:nginx:0.1.39:::::::* cpe:2.3:a:f5:nginx:0.1.38:::::::* cpe:2.3:a:f5:nginx:0.1.37:::::::* cpe:2.3:a:f5:nginx:0.1.36:::::::* cpe:2.3:a:f5:nginx:0.1.35:::::::* cpe:2.3:a:f5:nginx:0.1.34:::::::* cpe:2.3:a:f5:nginx:0.1.33:::::::* cpe:2.3:a:f5:nginx:0.1.32:::::::* cpe:2.3:a:f5:nginx:0.1.31:::::::* cpe:2.3:a:f5:nginx:0.1.30:::::::* cpe:2.3:a:f5:nginx:0.1.3:::::::* cpe:2.3:a:f5:nginx:0.1.29:::::::* cpe:2.3:a:f5:nginx:0.1.28:::::::* cpe:2.3:a:f5:nginx:0.1.27:::::::* cpe:2.3:a:f5:nginx:0.1.26:::::::* cpe:2.3:a:f5:nginx:0.1.25:::::::* cpe:2.3:a:f5:nginx:0.1.24:::::::* cpe:2.3:a:f5:nginx:0.1.23:::::::* cpe:2.3:a:f5:nginx:0.1.22:::::::* cpe:2.3:a:f5:nginx:0.1.21:::::::* cpe:2.3:a:f5:nginx:0.1.20:::::::* cpe:2.3:a:f5:nginx:0.1.2:::::::* cpe:2.3:a:f5:nginx:0.1.19:::::::* cpe:2.3:a:f5:nginx:0.1.18:::::::* cpe:2.3:a:f5:nginx:0.1.17:::::::* cpe:2.3:a:f5:nginx:0.1.16:::::::* cpe:2.3:a:f5:nginx:0.1.15:::::::* cpe:2.3:a:f5:nginx:0.1.14:::::::* cpe:2.3:a:f5:nginx:0.1.13:::::::* cpe:2.3:a:f5:nginx:0.1.12:::::::* cpe:2.3:a:f5:nginx:0.1.11:::::::* cpe:2.3:a:f5:nginx:0.1.10:::::::* cpe:2.3:a:f5:nginx:0.1.1:::::::* cpe:2.3:a:f5:nginx:0.1.0:::::::* cpe:2.3:a:f5:nginx:r2::::open_source_subscription::: cpe:2.3:a:f5:nginx:r1::::open_source_subscription::: cpe:2.3:a:f5:nginx::::::::	340
Application	Openssl cpe:2.3:a:openssl:openssl:1.0::openvms::::: cpe:2.3:a:openssl:openssl:0.9.8zg:::::::* cpe:2.3:a:openssl:openssl:0.9.8zf:::::::* cpe:2.3:a:openssl:openssl:0.9.8ze:::::::* cpe:2.3:a:openssl:openssl:0.9.8zc:::::::* cpe:2.3:a:openssl:openssl:0.9.8zb:::::::* cpe:2.3:a:openssl:openssl:0.9.8za:::::::* cpe:2.3:a:openssl:openssl:0.9.8z:::::::* cpe:2.3:a:openssl:openssl:0.9.8y:::::::* cpe:2.3:a:openssl:openssl:0.9.8x:::::::* cpe:2.3:a:openssl:openssl:0.9.8w:::::::* cpe:2.3:a:openssl:openssl:0.9.8v:::::::* cpe:2.3:a:openssl:openssl:0.9.8u:::::::* cpe:2.3:a:openssl:openssl:0.9.8t:::::::* cpe:2.3:a:openssl:openssl:0.9.8s:::::::* cpe:2.3:a:openssl:openssl:0.9.8r:::::::* cpe:2.3:a:openssl:openssl:0.9.8q:::::::* cpe:2.3:a:openssl:openssl:0.9.8p:::::::* cpe:2.3:a:openssl:openssl:0.9.8o:::::::* cpe:2.3:a:openssl:openssl:0.9.8n:::::::* cpe:2.3:a:openssl:openssl:0.9.8m:-:::::: cpe:2.3:a:openssl:openssl:0.9.8m:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.8l:::::::* cpe:2.3:a:openssl:openssl:0.9.8k:::::::* cpe:2.3:a:openssl:openssl:0.9.8j:::::::* cpe:2.3:a:openssl:openssl:0.9.8i:::::::* cpe:2.3:a:openssl:openssl:0.9.8h:::::::* cpe:2.3:a:openssl:openssl:0.9.8g-9:::::::* cpe:2.3:a:openssl:openssl:0.9.8g:::::::* cpe:2.3:a:openssl:openssl:0.9.8g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f:::::::* cpe:2.3:a:openssl:openssl:0.9.8f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f::::::x86: cpe:2.3:a:openssl:openssl:0.9.8e:::::::* cpe:2.3:a:openssl:openssl:0.9.8e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8e::::::x86: cpe:2.3:a:openssl:openssl:0.9.8d:::::::* cpe:2.3:a:openssl:openssl:0.9.8d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8d::::::x86: cpe:2.3:a:openssl:openssl:0.9.8c-1:::::::* cpe:2.3:a:openssl:openssl:0.9.8c:::::::* cpe:2.3:a:openssl:openssl:0.9.8c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8c::::::x86: cpe:2.3:a:openssl:openssl:0.9.8b:::::::* cpe:2.3:a:openssl:openssl:0.9.8b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8b::::::x86: cpe:2.3:a:openssl:openssl:0.9.8a:::::::* cpe:2.3:a:openssl:openssl:0.9.8a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8a::::::x86: cpe:2.3:a:openssl:openssl:0.9.8:-:::::: cpe:2.3:a:openssl:openssl:0.9.8::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta4:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta5:::::: cpe:2.3:a:openssl:openssl:0.9.8:beta6:::::: cpe:2.3:a:openssl:openssl:0.9.8::::::x86: cpe:2.3:a:openssl:openssl:0.9.7m:::::::* cpe:2.3:a:openssl:openssl:0.9.7m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7m::::::x86: cpe:2.3:a:openssl:openssl:0.9.7l:::::::* cpe:2.3:a:openssl:openssl:0.9.7l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7l::::::x86: cpe:2.3:a:openssl:openssl:0.9.7k:::::::* cpe:2.3:a:openssl:openssl:0.9.7k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7k::::::x86: cpe:2.3:a:openssl:openssl:0.9.7j:::::::* cpe:2.3:a:openssl:openssl:0.9.7j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7j::::::x86: cpe:2.3:a:openssl:openssl:0.9.7i:::::::* cpe:2.3:a:openssl:openssl:0.9.7i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7i::::::x86: cpe:2.3:a:openssl:openssl:0.9.7h:::::::* cpe:2.3:a:openssl:openssl:0.9.7h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7h::::::x86: cpe:2.3:a:openssl:openssl:0.9.7g:::::::* cpe:2.3:a:openssl:openssl:0.9.7g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7g::::::x86: cpe:2.3:a:openssl:openssl:0.9.7f:::::::* cpe:2.3:a:openssl:openssl:0.9.7f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7f::::::x86: cpe:2.3:a:openssl:openssl:0.9.7e:::::::* cpe:2.3:a:openssl:openssl:0.9.7e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7e::::::x86: cpe:2.3:a:openssl:openssl:0.9.7d:::::::* cpe:2.3:a:openssl:openssl:0.9.7d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7d::::::x86: cpe:2.3:a:openssl:openssl:0.9.7c:::::::* cpe:2.3:a:openssl:openssl:0.9.7c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7c::::::x86: cpe:2.3:a:openssl:openssl:0.9.7b:::::::* cpe:2.3:a:openssl:openssl:0.9.7b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7b::::::x86: cpe:2.3:a:openssl:openssl:0.9.7a:::::::* cpe:2.3:a:openssl:openssl:0.9.7a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7a::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.7:-:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta6:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6m:::::::* cpe:2.3:a:openssl:openssl:0.9.6m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6m::::::x86: cpe:2.3:a:openssl:openssl:0.9.6l:::::::* cpe:2.3:a:openssl:openssl:0.9.6l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6l::::::x86: cpe:2.3:a:openssl:openssl:0.9.6k:::::::* cpe:2.3:a:openssl:openssl:0.9.6k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6k::::::x86: cpe:2.3:a:openssl:openssl:0.9.6j:::::::* cpe:2.3:a:openssl:openssl:0.9.6j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6j::::::x86: cpe:2.3:a:openssl:openssl:0.9.6i:::::::* cpe:2.3:a:openssl:openssl:0.9.6i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6i::::::x86: cpe:2.3:a:openssl:openssl:0.9.6h:::::::* cpe:2.3:a:openssl:openssl:0.9.6h:bogus:::::: cpe:2.3:a:openssl:openssl:0.9.6h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6h::::::x86: cpe:2.3:a:openssl:openssl:0.9.6g:::::::* cpe:2.3:a:openssl:openssl:0.9.6g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6g::::::x86: cpe:2.3:a:openssl:openssl:0.9.6f:::::::* cpe:2.3:a:openssl:openssl:0.9.6f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6f::::::x86: cpe:2.3:a:openssl:openssl:0.9.6e:::::::* cpe:2.3:a:openssl:openssl:0.9.6e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6e::::::x86: cpe:2.3:a:openssl:openssl:0.9.6d:-:::::: cpe:2.3:a:openssl:openssl:0.9.6d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6d::::::x86: cpe:2.3:a:openssl:openssl:0.9.6c:::::::* cpe:2.3:a:openssl:openssl:0.9.6c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6c::::::x86: cpe:2.3:a:openssl:openssl:0.9.6b:::::::* cpe:2.3:a:openssl:openssl:0.9.6b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6b::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:-:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6a::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6:-:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6::::::x86: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5a:-:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a::::::x86: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5:-:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5::::::x86: cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.4:::::::* cpe:2.3:a:openssl:openssl:0.9.4::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.4::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.4::::::x86: cpe:2.3:a:openssl:openssl:0.9.3a:::::::* cpe:2.3:a:openssl:openssl:0.9.3a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3a::::::x86: cpe:2.3:a:openssl:openssl:0.9.3:-:::::: cpe:2.3:a:openssl:openssl:0.9.3::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3::::::x86: cpe:2.3:a:openssl:openssl:0.9.2b:::::::* cpe:2.3:a:openssl:openssl:0.9.2b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.2b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.2b::::::x86: cpe:2.3:a:openssl:openssl:0.9.1c:::::::* cpe:2.3:a:openssl:openssl:0.9.1c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.1c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.1c::::::x86: cpe:2.3:a:openssl:openssl:0.9.1b:::::::* cpe:2.3:a:openssl:openssl:0.9.0b:::::::* cpe:2.3:a:openssl:openssl:::::::: cpe:2.3:a:openssl:openssl:::openvms:::::* cpe:2.3:a:openssl:openssl:-:::::::*	276
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	5
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:5.0:::::::*	1
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:14:::::::* cpe:2.3:o:fedoraproject:fedora:13:::::::*	2
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.4:::::::* cpe:2.3:o:opensuse:opensuse:11.3:::::::* cpe:2.3:o:opensuse:opensuse:11.2:::::::* cpe:2.3:o:opensuse:opensuse:11.1:::::::*	4
Os	Suse Linux Enterprise cpe:2.3:o:suse:linux_enterprise:11.0:sp1::::::	1
Os	Suse Linux Enterprise Desktop cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:::::: cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:::::: cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:::-:::*	3
Os	Suse Linux Enterprise Server cpe:2.3:o:suse:linux_enterprise_server:10:sp3:::-:::* cpe:2.3:o:suse:linux_enterprise_server:10:sp4:::-:::* cpe:2.3:o:suse:linux_enterprise_server:9:::::::*	3

OpenVAS Exploits

Date	Description
2012-08-31	Name : VMSA-2012-0013 VMware vSphere and vCOps updates to third party libraries. File : nvt/gb_VMSA-2012-0013.nasl
2012-07-30	Name : CentOS Update for openssl CESA-2010:0977 centos4 x86_64 File : nvt/gb_CESA-2010_0977_openssl_centos4_x86_64.nasl
2012-03-15	Name : VMSA-2011-0013.2 VMware third party component updates for VMware vCenter Serv... File : nvt/gb_VMSA-2011-0013.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-01 (openssl) File : nvt/glsa_201110_01.nasl
2011-09-12	Name : Fedora Update for openssl FEDORA-2011-12281 File : nvt/gb_fedora_2011_12281_openssl_fc14.nasl
2011-08-19	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2011-004) File : nvt/secpod_macosx_su11-004.nasl
2011-08-09	Name : CentOS Update for openssl CESA-2010:0978 centos5 i386 File : nvt/gb_CESA-2010_0978_openssl_centos5_i386.nasl
2011-05-05	Name : HP-UX Update for OpenSSL HPSBUX02638 File : nvt/gb_hp_ux_HPSBUX02638.nasl
2011-03-24	Name : Fedora Update for openssl FEDORA-2011-1255 File : nvt/gb_fedora_2011_1255_openssl_fc13.nasl
2011-02-16	Name : Fedora Update for openssl FEDORA-2011-1273 File : nvt/gb_fedora_2011_1273_openssl_fc14.nasl
2011-01-31	Name : CentOS Update for openssl CESA-2010:0977 centos4 i386 File : nvt/gb_CESA-2010_0977_openssl_centos4_i386.nasl
2010-12-28	Name : Fedora Update for openssl FEDORA-2010-18765 File : nvt/gb_fedora_2010_18765_openssl_fc14.nasl
2010-12-28	Name : Fedora Update for openssl FEDORA-2010-18736 File : nvt/gb_fedora_2010_18736_openssl_fc13.nasl
2010-12-28	Name : RedHat Update for openssl RHSA-2010:0978-01 File : nvt/gb_RHSA-2010_0978-01_openssl.nasl
2010-12-28	Name : RedHat Update for openssl RHSA-2010:0977-01 File : nvt/gb_RHSA-2010_0977-01_openssl.nasl
2010-12-23	Name : Mandriva Update for openssl MDVSA-2010:248 (openssl) File : nvt/gb_mandriva_MDVSA_2010_248.nasl
2010-12-23	Name : Ubuntu Update for openssl vulnerabilities USN-1029-1 File : nvt/gb_ubuntu_USN_1029_1.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-340-01 openssl File : nvt/esoft_slk_ssa_2010_340_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
69565	OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG Session Resume Ciphersuite Do... OpenSSL contains a flaw related to the SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG workaround in the SSL/TLS server code. The issue is triggered when a remote attacker downgrades the cached ciphersuite, leading to the client using a weaker ciphersuite.

Information Assurance Vulnerability Management (IAVM)

Date	Description
2012-09-27	IAVM : 2012-A-0153 - Multiple Vulnerabilities in VMware ESX 4.0 and ESXi 4.0 Severity : Category I - VMSKEY : V0033884
2012-09-13	IAVM : 2012-B-0086 - VMware vCenter Operations Arbitrary File Overwrite Vulnerability Severity : Category I - VMSKEY : V0033791
2012-09-13	IAVM : 2012-A-0146 - Multiple Vulnerabilities in VMware vCenter Update Manager 4.1 Severity : Category I - VMSKEY : V0033792
2012-09-13	IAVM : 2012-A-0147 - Multiple Vulnerabilities in VMware vCenter Server 4.1 Severity : Category I - VMSKEY : V0033793
2012-09-13	IAVM : 2012-A-0148 - Multiple Vulnerabilities in VMware ESXi 4.1 and ESX 4.1 Severity : Category I - VMSKEY : V0033794
2012-04-05	IAVM : 2012-B-0038 - Multiple Vulnerabilities in HP Onboard Administrator Severity : Category I - VMSKEY : V0031972
2011-12-15	IAVM : 2011-A-0173 - Multiple Vulnerabilities in VMware ESX 4.0 Severity : Category I - VMSKEY : V0030824
2011-12-01	IAVM : 2011-A-0160 - Multiple Vulnerabilities in VMware vCenter Server 4.0 and vCenter Update Mana... Severity : Category I - VMSKEY : V0030769

Nessus® Vulnerability Scanner

Date	Description
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_esx_VMSA-2013-0009_remote.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0013_remote.nasl - Type : ACT_GATHER_INFO
2016-02-29	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2012-0013_remote.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0008.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0007.nasl - Type : ACT_GATHER_INFO
2014-08-22	Name : The remote host is affected by multiple vulnerabilities. File : juniper_nsm_jsa10642.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-76.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libopenssl-devel-101207.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_curl-120124.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_openssl_advisory3.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_openssl_advisory2.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_openssl_advisory5.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote VMware ESXi 5.0 host is affected by multiple vulnerabilities. File : vmware_esxi_5_0_build_912577_remote.nasl - Type : ACT_GATHER_INFO
2013-07-29	Name : The remote host has a virtualization appliance installed that is affected by ... File : vcenter_operations_manager_vmsa_2012-0013.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0978.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0979.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0977.nasl - Type : ACT_GATHER_INFO
2013-07-10	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libcurl4-8618.nasl - Type : ACT_GATHER_INFO
2013-06-17	Name : The remote host has an update manager installed that is affected by multiple ... File : vmware_vcenter_update_mgr_vmsa-2012-0013.nasl - Type : ACT_GATHER_INFO
2013-06-05	Name : The remote host has a virtualization management application installed that is... File : vmware_vcenter_vmsa-2012-0013.nasl - Type : ACT_GATHER_INFO
2012-08-31	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2012-0013.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101213_openssl_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101213_openssl_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-01-04	Name : The remote SSL layer is affected by a denial of service vulnerability. File : openssl_0_9_8p_1_0_0e.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7645.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-7462.nasl - Type : ACT_GATHER_INFO
2011-10-28	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0013.nasl - Type : ACT_GATHER_INFO
2011-10-10	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-01.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7644.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2011-06-24	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_10_6_8.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libopenssl-devel-101207.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libopenssl-devel-101207.nasl - Type : ACT_GATHER_INFO
2011-05-04	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-7463.nasl - Type : ACT_GATHER_INFO
2011-05-04	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12701.nasl - Type : ACT_GATHER_INFO
2011-02-07	Name : The remote host allows resuming SSL sessions with a weaker cipher than the on... File : openssl_resume_different_cipher.nasl - Type : ACT_ATTACK
2011-01-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0977.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-101207.nasl - Type : ACT_GATHER_INFO
2011-01-10	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2141.nasl - Type : ACT_GATHER_INFO
2010-12-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-18736.nasl - Type : ACT_GATHER_INFO
2010-12-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0979.nasl - Type : ACT_GATHER_INFO
2010-12-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0978.nasl - Type : ACT_GATHER_INFO
2010-12-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0977.nasl - Type : ACT_GATHER_INFO
2010-12-14	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0978.nasl - Type : ACT_GATHER_INFO
2010-12-12	Name : The remote Fedora host is missing a security update. File : fedora_2010-18765.nasl - Type : ACT_GATHER_INFO
2010-12-08	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-248.nasl - Type : ACT_GATHER_INFO
2010-12-08	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-340-01.nasl - Type : ACT_GATHER_INFO
2010-12-08	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1029-1.nasl - Type : ACT_GATHER_INFO
2010-12-07	Name : The remote web server is affected by multiple vulnerabilities. File : openssl_1_0_0c.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
BID	http://www.securityfocus.com/bid/45164
CERT-VN	http://www.kb.cert.org/vuls/id/737740
CONFIRM	http://cvs.openssl.org/chngview?cn=20131 http://openssl.org/news/secadv_20101202.txt http://support.apple.com/kb/HT4723 https://bugzilla.redhat.com/show_bug.cgi?id=659462 https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST
DEBIAN	http://www.debian.org/security/2011/dsa-2141
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2010-December/05202... http://lists.fedoraproject.org/pipermail/package-announce/2010-December/05231...
HP	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 http://marc.info/?l=bugtraq&m=129916880600544&w=2 http://marc.info/?l=bugtraq&m=130497251507577&w=2 http://marc.info/?l=bugtraq&m=132077688910227&w=2 http://www.securityfocus.com/archive/1/522176
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2010:248
OSVDB	http://osvdb.org/69565
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://www.redhat.com/support/errata/RHSA-2010-0977.html http://www.redhat.com/support/errata/RHSA-2010-0978.html http://www.redhat.com/support/errata/RHSA-2010-0979.html http://www.redhat.com/support/errata/RHSA-2011-0896.html
SECTRACK	http://www.securitytracker.com/id?1024822
SECUNIA	http://secunia.com/advisories/42469 http://secunia.com/advisories/42473 http://secunia.com/advisories/42493 http://secunia.com/advisories/42571 http://secunia.com/advisories/42620 http://secunia.com/advisories/42811 http://secunia.com/advisories/42877 http://secunia.com/advisories/43169 http://secunia.com/advisories/43170 http://secunia.com/advisories/43171 http://secunia.com/advisories/43172 http://secunia.com/advisories/43173 http://secunia.com/advisories/44269
SLACKWARE	http://slackware.com/security/viewer.php?l=slackware-security&y=2010&...
SUSE	http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html
UBUNTU	http://ubuntu.com/usn/usn-1029-1
VUPEN	http://www.vupen.com/english/advisories/2010/3120 http://www.vupen.com/english/advisories/2010/3122 http://www.vupen.com/english/advisories/2010/3134 http://www.vupen.com/english/advisories/2010/3188 http://www.vupen.com/english/advisories/2011/0032 http://www.vupen.com/english/advisories/2011/0076 http://www.vupen.com/english/advisories/2011/0268

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-02-02 01:14:29	Multiple Updates
2024-02-01 12:04:02	Multiple Updates
2023-09-05 12:13:29	Multiple Updates
2023-09-05 01:03:53	Multiple Updates
2023-09-02 12:13:35	Multiple Updates
2023-09-02 01:03:56	Multiple Updates
2023-08-12 12:16:09	Multiple Updates
2023-08-12 01:03:56	Multiple Updates
2023-08-11 12:13:37	Multiple Updates
2023-08-11 01:04:04	Multiple Updates
2023-08-06 12:13:06	Multiple Updates
2023-08-06 01:03:58	Multiple Updates
2023-08-04 12:13:11	Multiple Updates
2023-08-04 01:03:58	Multiple Updates
2023-07-14 12:13:08	Multiple Updates
2023-07-14 01:03:56	Multiple Updates
2023-03-29 01:15:03	Multiple Updates
2023-03-28 12:04:02	Multiple Updates
2022-10-25 01:11:00	Multiple Updates
2022-10-11 12:11:43	Multiple Updates
2022-10-11 01:03:43	Multiple Updates
2022-08-05 00:27:52	Multiple Updates
2022-02-03 12:09:03	Multiple Updates
2021-05-04 12:13:02	Multiple Updates
2021-04-22 01:13:26	Multiple Updates
2020-05-23 01:43:01	Multiple Updates
2020-05-23 00:26:52	Multiple Updates
2019-09-24 01:03:21	Multiple Updates
2019-03-19 12:03:48	Multiple Updates
2018-08-10 12:02:02	Multiple Updates
2017-09-19 09:24:03	Multiple Updates
2016-08-23 09:24:39	Multiple Updates
2016-06-28 18:22:22	Multiple Updates
2016-04-26 20:13:32	Multiple Updates
2016-03-05 13:26:42	Multiple Updates
2016-03-01 13:26:32	Multiple Updates
2014-11-27 13:27:49	Multiple Updates
2014-06-14 13:29:45	Multiple Updates
2014-04-17 13:25:36	Multiple Updates
2014-02-21 13:21:29	Multiple Updates
2014-02-17 10:58:31	Multiple Updates
2013-11-11 12:39:04	Multiple Updates
2013-11-04 21:21:07	Multiple Updates
2013-09-12 13:19:51	Multiple Updates
2013-07-17 21:18:44	Multiple Updates
2013-05-10 23:36:44	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	16
CPE ID(s)	635
Sources(s)	50
osvdb(s)	1
Openvas Exploit(s)	18
IAVM(s)	8
Nessus® Exploit(s)	51

	Related
10	VMSA-2011-0013
10	RHSA-2010:0977
10	GLSA-201110-01
9.3	VU#737740
9.3	VMSA-2012-0013
7.6	HPSBUX02638 SSR...
7.6	HPSBOV02670 SSR...
7.6	HPSBMU02759 SSR...
7.6	HPSBMA02658 SSR...
5.8	HPSBHF02706 SSR...
5.8	DSA-2141
4.3	USN-1029-1
4.3	RHSA-2010:0979
4.3	RHSA-2010:0978
4.3	MDVSA-2010:248
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 15 more Alert(s)

4.3 - CVE-2010-4180

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU