oval:org.mitre.oval:def:12168

Definition Id: oval:org.mitre.oval:def:12168

Oval ID:	oval:org.mitre.oval:def:12168
Title:	HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS)
Description:	Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4355	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02517 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08n.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08n.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08n.002 AND openssl.OPENSSL-INC version is less than A.00.09.08n.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08n.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08n.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08n.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08n.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08n.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08n.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08n.002 OR Criteria meets HP Security Bulletin HPSBUX02517 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08n.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08n.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08n.001 AND openssl.OPENSSL-INC version is less than A.00.09.08n.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08n.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08n.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08n.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08n.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08n.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08n.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08n.001 OR Criteria meets HP Security Bulletin HPSBUX02517 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08n.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08n.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08n.003 AND openssl.OPENSSL-INC version is less than A.00.09.08n.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08n.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08n.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08n.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08n.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08n.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08n.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08n.003

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0473s

Facebook rss twitter linkedin mail