oval:org.mitre.oval:def:12395

Definition Id: oval:org.mitre.oval:def:12395

Oval ID:	oval:org.mitre.oval:def:12395
Title:	HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, Denial of Service (DoS)
Description:	The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0742	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02610 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08o.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08o.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08o.002 AND openssl.OPENSSL-INC version is less than A.00.09.08o.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08o.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08o.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08o.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08o.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08o.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08o.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08o.002 OR Criteria meets HP Security Bulletin HPSBUX02610 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08o.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08o.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08o.003 AND openssl.OPENSSL-INC version is less than A.00.09.08o.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08o.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08o.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08o.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08o.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08o.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08o.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08o.003 OR Criteria meets HP Security Bulletin HPSBUX02610 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08o.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08o.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08o.003 AND openssl.OPENSSL-INC version is less than A.00.09.08o.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08o.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08o.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08o.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08o.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08o.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08o.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08o.003

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0296s

Facebook rss twitter linkedin mail