oval:org.mitre.oval:def:4574

Definition Id: oval:org.mitre.oval:def:4574

Oval ID:	oval:org.mitre.oval:def:4574
Title:	OpenSSL ASN.1 Inputs Character Tracking Vulnerability
Description:	OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2003-0544	Version:	3
Platform(s):	Sun Solaris 8 Sun Solaris 9	Product(s):	Sun Cluster
Definition Synopsis:
Software section Solaris 8 or 9 installed Solaris 8 Installed AND Solaris 9 Installed AND NOT Patch 113505-02 or later installed AND NOT Patch 113508-02 or later installed AND NOT Patch 115054-01 or later installed AND NOT Patch 115055-01 or later installed AND SunCluster Component SUNWscvw installed AND Apache (SUNWapchu) installed AND Configuration section Apache running with SunPlex Manager config