The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 3.9 | 3.6 |
| nvd@nist.gov | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 3.9 | 3.6 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-476,CWE-476,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| neoteris | instant_virtual_extranet | 3.2 |
| stonesoft | stonegate | 1.5.17 |
| vmware | gsx_server | 2.0 |
| securecomputing | sidewinder | 5.2.0.01 |
| hp | wbem | a.02.00.00 |
| cisco | pix_firewall_software | 6.3(2) |
| avaya | vsu | 5x |
| stonesoft | stonegate | 2.2.1 |
| bluecoat | proxysg | * |
| redhat | openssl | 0.9.7a-2 |
| lite | speed_technologies_litespeed_web_server | 1.3.1 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc2 |
| cisco | threat_response | * |
| cisco | pix_firewall_software | 6.2 |
| dell | bsafe_ssl-j | 3.1 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc2 |
| cisco | pix_firewall_software | 6.1(3) |
| avaya | sg208 | * |
| redhat | linux | 7.2 |
| 4d | webstar | 5.2.2 |
| cisco | pix_firewall_software | 6.1(4) |
| cisco | webns | 7.1_0.2.06 |
| hp | hp-ux | 11.11 |
| avaya | vsu | 7500_r2.0.1 |
| stonesoft | stonegate_vpn_client | 1.7 |
| cisco | firewall_services_module | 1.1.3 |
| neoteris | instant_virtual_extranet | 3.0 |
| cisco | ciscoworks_common_services | 2.2 |
| cisco | pix_firewall_software | 6.3(3.102) |
| cisco | firewall_services_module | * |
| stonesoft | stonebeat_fullcluster | 3.0 |
| cisco | css11000_content_services_switch | * |
| checkpoint | vpn-1 | next_generation_fp2 |
| cisco | pix_firewall_software | 6.3 |
| bluecoat | cacheos_ca_sa | 4.1.10 |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| cisco | webns | 7.2_0.0.03 |
| apple | mac_os_x | 10.3.3 |
| cisco | pix_firewall_software | 6.2(2) |
| stonesoft | stonegate | 2.0.1 |
| avaya | sg203 | 4.31.29 |
| checkpoint | vpn-1 | next_generation_fp0 |
| cisco | pix_firewall_software | 6.2(3) |
| cisco | pix_firewall_software | 6.0 |
| avaya | sg203 | 4.4 |
| avaya | sg5 | 4.3 |
| cisco | gss_4480_global_site_selector | * |
| stonesoft | stonegate_vpn_client | 2.0.7 |
| cisco | ios | 12.1(11b)e |
| 4d | webstar | 5.2.1 |
| cisco | ios | 12.1(13)e9 |
| redhat | openssl | 0.9.6b-3 |
| cisco | pix_firewall_software | 6.0(4.101) |
| checkpoint | vpn-1 | next_generation_fp1 |
| cisco | call_manager | * |
| 4d | webstar | 5.3 |
| stonesoft | stonebeat_webcluster | 2.5 |
| avaya | converged_communications_server | 2.0 |
| securecomputing | sidewinder | 5.2.1 |
| hp | wbem | a.02.00.01 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc3 |
| avaya | vsu | 10000_r2.0.1 |
| tarantella | tarantella_enterprise | 3.30 |
| stonesoft | stonebeat_fullcluster | 1_3.0 |
| checkpoint | firewall-1 | next_generation_fp2 |
| dell | bsafe_ssl-j | 3.0 |
| stonesoft | servercluster | 2.5.2 |
| 4d | webstar | 5.2.4 |
| novell | edirectory | 8.7 |
| cisco | pix_firewall_software | 6.1(2) |
| stonesoft | servercluster | 2.5 |
| novell | edirectory | 8.7.1 |
| cisco | ios | 12.2(14)sy |
| openssl | openssl | 0.9.6f |
| stonesoft | stonegate | 1.6.2 |
| avaya | vsu | 5 |
| avaya | sg208 | 4.4 |
| 4d | webstar | 5.3.1 |
| cisco | firewall_services_module | 1.1.2 |
| freebsd | freebsd | 4.8 |
| avaya | vsu | 500 |
| cisco | css_secure_content_accelerator | 1.0 |
| stonesoft | stonebeat_fullcluster | 1_2.0 |
| freebsd | freebsd | 5.1 |
| avaya | intuity_audix | s3210 |
| sgi | propack | 2.3 |
| cisco | ios | 12.1(11b)e14 |
| stonesoft | stonegate | 1.7 |
| openssl | openssl | 0.9.7a |
| avaya | s8500 | r2.0.0 |
| securecomputing | sidewinder | 5.2.0.04 |
| freebsd | freebsd | 4.9 |
| cisco | content_services_switch_11500 | * |
| cisco | webns | 6.10_b4 |
| 4d | webstar | 5.2.3 |
| hp | hp-ux | 11.23 |
| novell | imanager | 2.0 |
| checkpoint | vpn-1 | vsx_ng_with_application_intelligence |
| openssl | openssl | 0.9.7c |
| lite | speed_technologies_litespeed_web_server | 1.2_rc1 |
| avaya | sg5 | 4.4 |
| lite | speed_technologies_litespeed_web_server | 1.0.1 |
| novell | edirectory | 8.5 |
| avaya | s8700 | r2.0.1 |
| stonesoft | stonegate | 1.7.2 |
| apple | mac_os_x_server | 10.3.3 |
| avaya | s8300 | r2.0.1 |
| cisco | mds_9000 | * |
| checkpoint | firewall-1 | 2.0 |
| tarantella | tarantella_enterprise | 3.40 |
| cisco | ios | 12.2za |
| hp | aaa_server | * |
| avaya | sg200 | 4.4 |
| lite | speed_technologies_litespeed_web_server | 1.0.3 |
| vmware | gsx_server | 3.0_build_7592 |
| cisco | webns | 6.10 |
| hp | hp-ux | 8.05 |
| checkpoint | firewall-1 | * |
| stonesoft | stonegate | 2.0.8 |
| stonesoft | stonebeat_securitycluster | 2.0 |
| cisco | ios | 12.1(19)e1 |
| stonesoft | stonegate | 2.2.4 |
| openssl | openssl | 0.9.6c |
| vmware | gsx_server | 2.5.1 |
| sgi | propack | 2.4 |
| avaya | s8700 | r2.0.0 |
| cisco | pix_firewall | 6.2.2_.111 |
| cisco | pix_firewall_software | 6.1 |
| checkpoint | firewall-1 | next_generation_fp0 |
| cisco | access_registrar | * |
| dell | bsafe_ssl-j | 3.0.1 |
| openssl | openssl | 0.9.6j |
| openbsd | openbsd | 3.4 |
| vmware | gsx_server | 2.5.1_build_5336 |
| avaya | sg200 | 4.31.29 |
| novell | edirectory | 8.0 |
| openbsd | openbsd | 3.3 |
| cisco | pix_firewall_software | 6.1(1) |
| avaya | intuity_audix | 5.1.46 |
| openssl | openssl | 0.9.6h |
| cisco | pix_firewall_software | 6.0(1) |
| 4d | webstar | 4.0 |
| stonesoft | stonegate_vpn_client | 1.7.2 |
| sco | openserver | 5.0.6 |
| openssl | openssl | 0.9.6i |
| openssl | openssl | 0.9.6g |
| lite | speed_technologies_litespeed_web_server | 1.3_rc1 |
| freebsd | freebsd | 5.2 |
| cisco | pix_firewall_software | 6.2(3.100) |
| hp | apache-based_web_server | 2.0.43.00 |
| stonesoft | stonegate_vpn_client | 2.0.8 |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| openssl | openssl | 0.9.6e |
| securecomputing | sidewinder | 5.2.1.02 |
| novell | edirectory | 8.5.27 |
| cisco | ios | 12.1(11b)e12 |
| lite | speed_technologies_litespeed_web_server | 1.1 |
| securecomputing | sidewinder | 5.2.0.03 |
| stonesoft | stonegate | 2.0.5 |
| cisco | pix_firewall_software | 6.0(2) |
| cisco | pix_firewall_software | 6.0(4) |
| checkpoint | provider-1 | 4.1 |
| avaya | intuity_audix | * |
| stonesoft | stonegate | 2.2 |
| cisco | webns | 7.1_0.1.02 |
| cisco | gss_4490_global_site_selector | * |
| neoteris | instant_virtual_extranet | 3.3.1 |
| hp | wbem | a.01.05.08 |
| stonesoft | stonegate | 1.7.1 |
| stonesoft | stonegate | 1.5.18 |
| lite | speed_technologies_litespeed_web_server | 1.3 |
| cisco | ios | 12.2(14)sy1 |
| hp | hp-ux | 11.00 |
| openssl | openssl | 0.9.7b |
| cisco | pix_firewall_software | 6.1(5) |
| stonesoft | stonegate_vpn_client | 2.0 |
| stonesoft | stonebeat_fullcluster | 2.0 |
| stonesoft | stonebeat_securitycluster | 2.5 |
| lite | speed_technologies_litespeed_web_server | 1.2.1 |
| sgi | propack | 3.0 |
| novell | edirectory | 8.5.12a |
| redhat | openssl | 0.9.6-15 |
| openssl | openssl | 0.9.7 |
| neoteris | instant_virtual_extranet | 3.3 |
| cisco | pix_firewall_software | 6.2(1) |
| avaya | s8500 | r2.0.1 |
| cisco | ios | 12.1(11)e |
| avaya | intuity_audix | s3400 |
| lite | speed_technologies_litespeed_web_server | 1.0.2 |
| openssl | openssl | 0.9.6d |
| cisco | pix_firewall_software | 6.0(3) |
| 4d | webstar | 5.2 |
| stonesoft | stonegate | 2.1 |
| cisco | firewall_services_module | 1.1_(3.005) |
| stonesoft | stonegate | 1.6.3 |
| avaya | vsu | 5000_r2.0.1 |
| lite | speed_technologies_litespeed_web_server | 1.2.2 |
| cisco | webns | 7.10 |
| sun | crypto_accelerator_4000 | 1.0 |
| redhat | linux | 8.0 |
| avaya | vsu | 100_r2.0.1 |
| cisco | pix_firewall_software | 6.3(3.109) |
| novell | edirectory | 8.6.2 |
| vmware | gsx_server | 2.0.1_build_2129 |
| stonesoft | stonegate | 2.0.4 |
| redhat | linux | 7.3 |
| checkpoint | firewall-1 | next_generation_fp1 |
| openssl | openssl | 0.9.6k |
| redhat | enterprise_linux_desktop | 3.0 |
| sco | openserver | 5.0.7 |
| securecomputing | sidewinder | 5.2 |
| redhat | enterprise_linux | 3.0 |
| cisco | ios | 12.2sy |
| cisco | okena_stormwatch | 3.2 |
| stonesoft | stonegate | 2.0.6 |
| freebsd | freebsd | 5.2.1 |
| neoteris | instant_virtual_extranet | 3.1 |
| cisco | pix_firewall_software | 6.3(1) |
| stonesoft | stonegate | 2.0.9 |
| hp | apache-based_web_server | 2.0.43.04 |
| cisco | css_secure_content_accelerator | 2.0 |
| cisco | firewall_services_module | 2.1_(0.208) |
| cisco | secure_content_accelerator | 10000 |
| stonesoft | stonebeat_webcluster | 2.0 |
| securecomputing | sidewinder | 5.2.0.02 |
| cisco | webns | 7.10_.0.06s |
| stonesoft | stonegate_vpn_client | 2.0.9 |
| tarantella | tarantella_enterprise | 3.20 |
| stonesoft | stonegate | 2.0.7 |
| avaya | sg5 | 4.2 |
| avaya | vsu | 2000_r2.0.1 |
| avaya | s8300 | r2.0.0 |
| novell | imanager | 1.5 |
| bluecoat | cacheos_ca_sa | 4.1.12 |
| cisco | application_and_content_networking_software | * |
| stonesoft | stonebeat_fullcluster | 2.5 |
| lite | speed_technologies_litespeed_web_server | 1.1.1 |
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| neoteris | instant_virtual_extranet | 3.2 |
| stonesoft | stonegate | 1.5.17 |
| vmware | gsx_server | 2.0 |
| securecomputing | sidewinder | 5.2.0.01 |
| hp | wbem | a.02.00.00 |
| cisco | pix_firewall_software | 6.3(2) |
| stonesoft | stonegate | 2.2.1 |
| avaya | vsu | 5x |
| bluecoat | proxysg | * |
| redhat | openssl | 0.9.7a-2 |
| lite | speed_technologies_litespeed_web_server | 1.3.1 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc2 |
| cisco | threat_response | * |
| cisco | pix_firewall_software | 6.2 |
| dell | bsafe_ssl-j | 3.1 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc2 |
| cisco | pix_firewall_software | 6.1(3) |
| avaya | sg208 | * |
| redhat | linux | 7.2 |
| 4d | webstar | 5.2.2 |
| cisco | pix_firewall_software | 6.1(4) |
| cisco | webns | 7.1_0.2.06 |
| hp | hp-ux | 11.11 |
| stonesoft | stonegate_vpn_client | 1.7 |
| avaya | vsu | 7500_r2.0.1 |
| cisco | firewall_services_module | 1.1.3 |
| neoteris | instant_virtual_extranet | 3.0 |
| cisco | ciscoworks_common_services | 2.2 |
| cisco | pix_firewall_software | 6.3(3.102) |
| cisco | firewall_services_module | * |
| stonesoft | stonebeat_fullcluster | 3.0 |
| cisco | css11000_content_services_switch | * |
| cisco | pix_firewall_software | 6.3 |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| bluecoat | cacheos_ca_sa | 4.1.10 |
| cisco | webns | 7.2_0.0.03 |
| apple | mac_os_x | 10.3.3 |
| stonesoft | stonegate | 2.0.1 |
| cisco | pix_firewall_software | 6.2(2) |
| avaya | sg203 | 4.31.29 |
| checkpoint | vpn-1 | next_generation_fp0 |
| cisco | pix_firewall_software | 6.2(3) |
| cisco | pix_firewall_software | 6.0 |
| avaya | sg5 | 4.3 |
| cisco | gss_4480_global_site_selector | * |
| avaya | sg203 | 4.4 |
| stonesoft | stonegate_vpn_client | 2.0.7 |
| cisco | ios | 12.1(11b)e |
| 4d | webstar | 5.2.1 |
| cisco | ios | 12.1(13)e9 |
| redhat | openssl | 0.9.6b-3 |
| cisco | pix_firewall_software | 6.0(4.101) |
| checkpoint | vpn-1 | next_generation_fp1 |
| cisco | call_manager | * |
| 4d | webstar | 5.3 |
| stonesoft | stonebeat_webcluster | 2.5 |
| avaya | converged_communications_server | 2.0 |
| securecomputing | sidewinder | 5.2.1 |
| hp | wbem | a.02.00.01 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc3 |
| tarantella | tarantella_enterprise | 3.30 |
| avaya | vsu | 10000_r2.0.1 |
| stonesoft | stonebeat_fullcluster | 1_3.0 |
| stonesoft | servercluster | 2.5.2 |
| checkpoint | firewall-1 | next_generation_fp2 |
| dell | bsafe_ssl-j | 3.0 |
| 4d | webstar | 5.2.4 |
| novell | edirectory | 8.7 |
| cisco | pix_firewall_software | 6.1(2) |
| stonesoft | servercluster | 2.5 |
| novell | edirectory | 8.7.1 |
| cisco | ios | 12.2(14)sy |
| openssl | openssl | 0.9.6f |
| stonesoft | stonegate | 1.6.2 |
| avaya | vsu | 5 |
| avaya | sg208 | 4.4 |
| 4d | webstar | 5.3.1 |
| avaya | vsu | 500 |
| cisco | firewall_services_module | 1.1.2 |
| freebsd | freebsd | 4.8 |
| cisco | css_secure_content_accelerator | 1.0 |
| freebsd | freebsd | 5.1 |
| stonesoft | stonebeat_fullcluster | 1_2.0 |
| avaya | intuity_audix | s3210 |
| sgi | propack | 2.3 |
| cisco | ios | 12.1(11b)e14 |
| openssl | openssl | 0.9.7a |
| stonesoft | stonegate | 1.7 |
| avaya | s8500 | r2.0.0 |
| securecomputing | sidewinder | 5.2.0.04 |
| freebsd | freebsd | 4.9 |
| cisco | content_services_switch_11500 | * |
| cisco | webns | 6.10_b4 |
| 4d | webstar | 5.2.3 |
| hp | hp-ux | 11.23 |
| novell | imanager | 2.0 |
| checkpoint | vpn-1 | vsx_ng_with_application_intelligence |
| openssl | openssl | 0.9.7c |
| lite | speed_technologies_litespeed_web_server | 1.2_rc1 |
| avaya | sg5 | 4.4 |
| lite | speed_technologies_litespeed_web_server | 1.0.1 |
| novell | edirectory | 8.5 |
| apple | mac_os_x_server | 10.3.3 |
| avaya | s8700 | r2.0.1 |
| stonesoft | stonegate | 1.7.2 |
| avaya | s8300 | r2.0.1 |
| tarantella | tarantella_enterprise | 3.40 |
| checkpoint | firewall-1 | 2.0 |
| cisco | mds_9000 | * |
| hp | aaa_server | * |
| cisco | ios | 12.2za |
| avaya | sg200 | 4.4 |
| lite | speed_technologies_litespeed_web_server | 1.0.3 |
| vmware | gsx_server | 3.0_build_7592 |
| cisco | webns | 6.10 |
| hp | hp-ux | 8.05 |
| checkpoint | firewall-1 | * |
| stonesoft | stonegate | 2.0.8 |
| stonesoft | stonebeat_securitycluster | 2.0 |
| cisco | ios | 12.1(19)e1 |
| stonesoft | stonegate | 2.2.4 |
| vmware | gsx_server | 2.5.1 |
| openssl | openssl | 0.9.6c |
| sgi | propack | 2.4 |
| avaya | s8700 | r2.0.0 |
| cisco | pix_firewall | 6.2.2_.111 |
| cisco | pix_firewall_software | 6.1 |
| checkpoint | firewall-1 | next_generation_fp0 |
| cisco | access_registrar | * |
| dell | bsafe_ssl-j | 3.0.1 |
| openssl | openssl | 0.9.6j |
| openbsd | openbsd | 3.4 |
| vmware | gsx_server | 2.5.1_build_5336 |
| avaya | sg200 | 4.31.29 |
| novell | edirectory | 8.0 |
| openbsd | openbsd | 3.3 |
| cisco | pix_firewall_software | 6.1(1) |
| avaya | intuity_audix | 5.1.46 |
| openssl | openssl | 0.9.6h |
| cisco | pix_firewall_software | 6.0(1) |
| 4d | webstar | 4.0 |
| stonesoft | stonegate_vpn_client | 1.7.2 |
| sco | openserver | 5.0.6 |
| openssl | openssl | 0.9.6i |
| openssl | openssl | 0.9.6g |
| lite | speed_technologies_litespeed_web_server | 1.3_rc1 |
| cisco | pix_firewall_software | 6.2(3.100) |
| freebsd | freebsd | 5.2 |
| stonesoft | stonegate_vpn_client | 2.0.8 |
| hp | apache-based_web_server | 2.0.43.00 |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| openssl | openssl | 0.9.6e |
| securecomputing | sidewinder | 5.2.1.02 |
| novell | edirectory | 8.5.27 |
| cisco | ios | 12.1(11b)e12 |
| lite | speed_technologies_litespeed_web_server | 1.1 |
| securecomputing | sidewinder | 5.2.0.03 |
| stonesoft | stonegate | 2.0.5 |
| cisco | pix_firewall_software | 6.0(2) |
| avaya | intuity_audix | * |
| cisco | pix_firewall_software | 6.0(4) |
| checkpoint | provider-1 | 4.1 |
| stonesoft | stonegate | 2.2 |
| checkpoint | vpn-1 | next_generation |
| cisco | webns | 7.1_0.1.02 |
| cisco | gss_4490_global_site_selector | * |
| neoteris | instant_virtual_extranet | 3.3.1 |
| hp | wbem | a.01.05.08 |
| stonesoft | stonegate | 1.7.1 |
| stonesoft | stonegate | 1.5.18 |
| lite | speed_technologies_litespeed_web_server | 1.3 |
| cisco | ios | 12.2(14)sy1 |
| hp | hp-ux | 11.00 |
| openssl | openssl | 0.9.7b |
| cisco | pix_firewall_software | 6.1(5) |
| stonesoft | stonebeat_fullcluster | 2.0 |
| stonesoft | stonegate_vpn_client | 2.0 |
| stonesoft | stonebeat_securitycluster | 2.5 |
| sgi | propack | 3.0 |
| lite | speed_technologies_litespeed_web_server | 1.2.1 |
| novell | edirectory | 8.5.12a |
| redhat | openssl | 0.9.6-15 |
| openssl | openssl | 0.9.7 |
| neoteris | instant_virtual_extranet | 3.3 |
| cisco | pix_firewall_software | 6.2(1) |
| avaya | s8500 | r2.0.1 |
| cisco | ios | 12.1(11)e |
| avaya | intuity_audix | s3400 |
| lite | speed_technologies_litespeed_web_server | 1.0.2 |
| openssl | openssl | 0.9.6d |
| cisco | pix_firewall_software | 6.0(3) |
| 4d | webstar | 5.2 |
| stonesoft | stonegate | 2.1 |
| cisco | firewall_services_module | 1.1_(3.005) |
| stonesoft | stonegate | 1.6.3 |
| avaya | vsu | 5000_r2.0.1 |
| cisco | webns | 7.10 |
| lite | speed_technologies_litespeed_web_server | 1.2.2 |
| sun | crypto_accelerator_4000 | 1.0 |
| redhat | linux | 8.0 |
| avaya | vsu | 100_r2.0.1 |
| cisco | pix_firewall_software | 6.3(3.109) |
| novell | edirectory | 8.6.2 |
| vmware | gsx_server | 2.0.1_build_2129 |
| stonesoft | stonegate | 2.0.4 |
| redhat | linux | 7.3 |
| checkpoint | firewall-1 | next_generation_fp1 |
| openssl | openssl | 0.9.6k |
| redhat | enterprise_linux_desktop | 3.0 |
| sco | openserver | 5.0.7 |
| securecomputing | sidewinder | 5.2 |
| cisco | ios | 12.2sy |
| redhat | enterprise_linux | 3.0 |
| cisco | okena_stormwatch | 3.2 |
| freebsd | freebsd | 5.2.1 |
| stonesoft | stonegate | 2.0.6 |
| neoteris | instant_virtual_extranet | 3.1 |
| cisco | pix_firewall_software | 6.3(1) |
| stonesoft | stonegate | 2.0.9 |
| hp | apache-based_web_server | 2.0.43.04 |
| cisco | firewall_services_module | 2.1_(0.208) |
| cisco | css_secure_content_accelerator | 2.0 |
| cisco | secure_content_accelerator | 10000 |
| stonesoft | stonebeat_webcluster | 2.0 |
| securecomputing | sidewinder | 5.2.0.02 |
| cisco | webns | 7.10_.0.06s |
| stonesoft | stonegate_vpn_client | 2.0.9 |
| tarantella | tarantella_enterprise | 3.20 |
| avaya | sg5 | 4.2 |
| stonesoft | stonegate | 2.0.7 |
| avaya | vsu | 2000_r2.0.1 |
| avaya | s8300 | r2.0.0 |
| novell | imanager | 1.5 |
| bluecoat | cacheos_ca_sa | 4.1.12 |
| cisco | application_and_content_networking_software | * |
| stonesoft | stonebeat_fullcluster | 2.5 |
| lite | speed_technologies_litespeed_web_server | 1.1.1 |
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-125,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| neoteris | instant_virtual_extranet | 3.2 |
| vmware | gsx_server | 2.0 |
| securecomputing | sidewinder | 5.2.0.01 |
| forcepoint | stonegate | 2.1 |
| hp | wbem | a.02.00.00 |
| cisco | pix_firewall_software | 6.3(2) |
| avaya | vsu | 5x |
| bluecoat | proxysg | * |
| redhat | openssl | 0.9.7a-2 |
| cisco | threat_response | * |
| cisco | pix_firewall_software | 6.2 |
| dell | bsafe_ssl-j | 3.1 |
| cisco | pix_firewall_software | 6.1(3) |
| avaya | sg208 | * |
| redhat | linux | 7.2 |
| 4d | webstar | 5.2.2 |
| cisco | pix_firewall_software | 6.1(4) |
| forcepoint | stonegate | 2.0.8 |
| cisco | webns | 7.1_0.2.06 |
| hp | hp-ux | 11.11 |
| forcepoint | stonegate | 1.7.1 |
| avaya | vsu | 7500_r2.0.1 |
| cisco | firewall_services_module | 1.1.3 |
| neoteris | instant_virtual_extranet | 3.0 |
| cisco | ciscoworks_common_services | 2.2 |
| cisco | pix_firewall_software | 6.3(3.102) |
| cisco | firewall_services_module | * |
| stonesoft | stonebeat_fullcluster | 3.0 |
| cisco | css11000_content_services_switch | * |
| checkpoint | vpn-1 | next_generation_fp2 |
| cisco | pix_firewall_software | 6.3 |
| bluecoat | cacheos_ca_sa | 4.1.10 |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| cisco | webns | 7.2_0.0.03 |
| apple | mac_os_x | 10.3.3 |
| cisco | pix_firewall_software | 6.2(2) |
| avaya | sg203 | 4.31.29 |
| checkpoint | vpn-1 | next_generation_fp0 |
| cisco | pix_firewall_software | 6.2(3) |
| cisco | pix_firewall_software | 6.0 |
| avaya | sg5 | 4.3 |
| forcepoint | stonegate | 2.0.4 |
| cisco | gss_4480_global_site_selector | * |
| avaya | sg203 | 4.4 |
| cisco | ios | 12.1(11b)e |
| 4d | webstar | 5.2.1 |
| cisco | ios | 12.1(13)e9 |
| redhat | openssl | 0.9.6b-3 |
| cisco | pix_firewall_software | 6.0(4.101) |
| checkpoint | vpn-1 | next_generation_fp1 |
| cisco | call_manager | * |
| forcepoint | stonegate | 2.2.1 |
| 4d | webstar | 5.3 |
| forcepoint | stonegate | 1.6.3 |
| stonesoft | stonebeat_webcluster | 2.5 |
| avaya | converged_communications_server | 2.0 |
| securecomputing | sidewinder | 5.2.1 |
| hp | wbem | a.02.00.01 |
| litespeedtech | litespeed_web_server | 1.0.1 |
| avaya | vsu | 10000_r2.0.1 |
| stonesoft | stonebeat_fullcluster | 1_3.0 |
| tarantella | tarantella_enterprise | 3.30 |
| stonesoft | servercluster | 2.5.2 |
| checkpoint | firewall-1 | next_generation_fp2 |
| dell | bsafe_ssl-j | 3.0 |
| 4d | webstar | 5.2.4 |
| forcepoint | stonegate | 1.5.17 |
| novell | edirectory | 8.7 |
| cisco | pix_firewall_software | 6.1(2) |
| stonesoft | servercluster | 2.5 |
| novell | edirectory | 8.7.1 |
| cisco | ios | 12.2(14)sy |
| openssl | openssl | 0.9.6f |
| avaya | vsu | 5 |
| avaya | sg208 | 4.4 |
| 4d | webstar | 5.3.1 |
| avaya | vsu | 500 |
| cisco | firewall_services_module | 1.1.2 |
| freebsd | freebsd | 4.8 |
| cisco | css_secure_content_accelerator | 1.0 |
| freebsd | freebsd | 5.1 |
| stonesoft | stonebeat_fullcluster | 1_2.0 |
| avaya | intuity_audix | s3210 |
| sgi | propack | 2.3 |
| cisco | ios | 12.1(11b)e14 |
| openssl | openssl | 0.9.7a |
| avaya | s8500 | r2.0.0 |
| securecomputing | sidewinder | 5.2.0.04 |
| freebsd | freebsd | 4.9 |
| cisco | content_services_switch_11500 | * |
| cisco | webns | 6.10_b4 |
| 4d | webstar | 5.2.3 |
| hp | hp-ux | 11.23 |
| novell | imanager | 2.0 |
| checkpoint | vpn-1 | vsx_ng_with_application_intelligence |
| openssl | openssl | 0.9.7c |
| avaya | sg5 | 4.4 |
| novell | edirectory | 8.5 |
| avaya | s8700 | r2.0.1 |
| apple | mac_os_x_server | 10.3.3 |
| avaya | s8300 | r2.0.1 |
| tarantella | tarantella_enterprise | 3.40 |
| checkpoint | firewall-1 | 2.0 |
| cisco | mds_9000 | * |
| hp | aaa_server | * |
| cisco | ios | 12.2za |
| avaya | sg200 | 4.4 |
| forcepoint | stonegate | 2.0.9 |
| vmware | gsx_server | 3.0_build_7592 |
| cisco | webns | 6.10 |
| hp | hp-ux | 8.05 |
| checkpoint | firewall-1 | * |
| stonesoft | stonebeat_securitycluster | 2.0 |
| cisco | ios | 12.1(19)e1 |
| vmware | gsx_server | 2.5.1 |
| openssl | openssl | 0.9.6c |
| sgi | propack | 2.4 |
| avaya | s8700 | r2.0.0 |
| cisco | pix_firewall | 6.2.2_.111 |
| cisco | pix_firewall_software | 6.1 |
| checkpoint | firewall-1 | next_generation_fp0 |
| cisco | access_registrar | * |
| dell | bsafe_ssl-j | 3.0.1 |
| openssl | openssl | 0.9.6j |
| openbsd | openbsd | 3.4 |
| vmware | gsx_server | 2.5.1_build_5336 |
| novell | edirectory | 8.0 |
| avaya | sg200 | 4.31.29 |
| openbsd | openbsd | 3.3 |
| cisco | pix_firewall_software | 6.1(1) |
| avaya | intuity_audix | 5.1.46 |
| openssl | openssl | 0.9.6h |
| cisco | pix_firewall_software | 6.0(1) |
| 4d | webstar | 4.0 |
| forcepoint | stonegate | 1.6.2 |
| sco | openserver | 5.0.6 |
| openssl | openssl | 0.9.6i |
| openssl | openssl | 0.9.6g |
| freebsd | freebsd | 5.2 |
| cisco | pix_firewall_software | 6.2(3.100) |
| hp | apache-based_web_server | 2.0.43.00 |
| openssl | openssl | 0.9.6e |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| securecomputing | sidewinder | 5.2.1.02 |
| novell | edirectory | 8.5.27 |
| cisco | ios | 12.1(11b)e12 |
| securecomputing | sidewinder | 5.2.0.03 |
| forcepoint | stonegate | 2.0.7 |
| cisco | pix_firewall_software | 6.0(2) |
| cisco | pix_firewall_software | 6.0(4) |
| checkpoint | provider-1 | 4.1 |
| avaya | intuity_audix | * |
| cisco | webns | 7.1_0.1.02 |
| cisco | gss_4490_global_site_selector | * |
| neoteris | instant_virtual_extranet | 3.3.1 |
| hp | wbem | a.01.05.08 |
| cisco | ios | 12.2(14)sy1 |
| hp | hp-ux | 11.00 |
| openssl | openssl | 0.9.7b |
| cisco | pix_firewall_software | 6.1(5) |
| stonesoft | stonebeat_fullcluster | 2.0 |
| stonesoft | stonebeat_securitycluster | 2.5 |
| sgi | propack | 3.0 |
| redhat | openssl | 0.9.6-15 |
| novell | edirectory | 8.5.12a |
| forcepoint | stonegate | 2.0.1 |
| openssl | openssl | 0.9.7 |
| forcepoint | stonegate | 2.2 |
| neoteris | instant_virtual_extranet | 3.3 |
| forcepoint | stonegate | 2.0.5 |
| cisco | pix_firewall_software | 6.2(1) |
| avaya | s8500 | r2.0.1 |
| cisco | ios | 12.1(11)e |
| avaya | intuity_audix | s3400 |
| openssl | openssl | 0.9.6d |
| cisco | pix_firewall_software | 6.0(3) |
| 4d | webstar | 5.2 |
| forcepoint | stonegate | 1.7.2 |
| cisco | firewall_services_module | 1.1_(3.005) |
| avaya | vsu | 5000_r2.0.1 |
| forcepoint | stonegate | 1.7 |
| cisco | webns | 7.10 |
| sun | crypto_accelerator_4000 | 1.0 |
| redhat | linux | 8.0 |
| avaya | vsu | 100_r2.0.1 |
| cisco | pix_firewall_software | 6.3(3.109) |
| novell | edirectory | 8.6.2 |
| vmware | gsx_server | 2.0.1_build_2129 |
| redhat | linux | 7.3 |
| forcepoint | stonegate | 2.2.4 |
| checkpoint | firewall-1 | next_generation_fp1 |
| openssl | openssl | 0.9.6k |
| redhat | enterprise_linux_desktop | 3.0 |
| sco | openserver | 5.0.7 |
| securecomputing | sidewinder | 5.2 |
| redhat | enterprise_linux | 3.0 |
| cisco | ios | 12.2sy |
| cisco | okena_stormwatch | 3.2 |
| freebsd | freebsd | 5.2.1 |
| neoteris | instant_virtual_extranet | 3.1 |
| cisco | pix_firewall_software | 6.3(1) |
| hp | apache-based_web_server | 2.0.43.04 |
| cisco | css_secure_content_accelerator | 2.0 |
| cisco | firewall_services_module | 2.1_(0.208) |
| cisco | secure_content_accelerator | 10000 |
| forcepoint | stonegate | 2.0.6 |
| stonesoft | stonebeat_webcluster | 2.0 |
| securecomputing | sidewinder | 5.2.0.02 |
| cisco | webns | 7.10_.0.06s |
| tarantella | tarantella_enterprise | 3.20 |
| avaya | sg5 | 4.2 |
| avaya | vsu | 2000_r2.0.1 |
| avaya | s8300 | r2.0.0 |
| forcepoint | stonegate | 1.5.18 |
| novell | imanager | 1.5 |
| bluecoat | cacheos_ca_sa | 4.1.12 |
| cisco | application_and_content_networking_software | * |
| stonesoft | stonebeat_fullcluster | 2.5 |
The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323 packets.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| stonesoft | firewall_engine | * |
The Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Stonesoft advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| stonesoft | stonegate_firewall | * |
Stonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded data, which makes it easier for remote attackers to scan or penetrate systems and avoid detection.
CVSS 2.0
Severity: HIGH
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| stonesoft | stonegate_ips | * |
Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks. NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-284,CWE-264,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| stonesoft | stonegate | * |
| aladdin | safenet_securewire_access_gateway | * |
| sonicwall | ssl_vpn | * |
| cisco | adaptive_security_appliance | * |
| sonicwall | e-class_ssl_vpn | * |