Back to search
CVE-2007-5135
Published: Sep 27, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://bugs.gentoo.org/show_bug.cgi?id=194039
x_refsource_MISC
HPSBUX02292
vendor-advisory
x_refsource_HP
oval:org.mitre.oval:def:5337
vdb-entry
signature
x_refsource_OVAL
20071001 Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow
mailing-list
x_refsource_BUGTRAQ
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0241
x_refsource_CONFIRM
27205
third-party-advisory
x_refsource_SECUNIA
27097
third-party-advisory
x_refsource_SECUNIA
ADV-2008-2362
vdb-entry
x_refsource_VUPEN
1018755
vdb-entry
x_refsource_SECTRACK
31489
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2008-07-31
vendor-advisory
x_refsource_APPLE
FEDORA-2007-725
vendor-advisory
x_refsource_FEDORA
RHSA-2007:1003
vendor-advisory
x_refsource_REDHAT
29242
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:193
vendor-advisory
x_refsource_MANDRIVA
https://issues.rpath.com/browse/RPL-1770
x_refsource_CONFIRM
27186
third-party-advisory
x_refsource_SECUNIA
27851
third-party-advisory
x_refsource_SECUNIA
ADV-2008-2268
vdb-entry
x_refsource_VUPEN
30124
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2008:005
vendor-advisory
x_refsource_SUSE
27394
third-party-advisory
x_refsource_SECUNIA
[4.1] 011: SECURITY FIX: October 10, 2007
vendor-advisory
x_refsource_OPENBSD
20071004 Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow
mailing-list
x_refsource_BUGTRAQ
oval:org.mitre.oval:def:10904
vdb-entry
signature
x_refsource_OVAL
20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
mailing-list
x_refsource_BUGTRAQ
31308
third-party-advisory
x_refsource_SECUNIA
22130
third-party-advisory
x_refsource_SECUNIA
27031
third-party-advisory
x_refsource_SECUNIA
ADV-2007-3625
vdb-entry
x_refsource_VUPEN
20070927 OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow
mailing-list
x_refsource_BUGTRAQ
FreeBSD-SA-07:08
vendor-advisory
x_refsource_FREEBSD
USN-522-1
vendor-advisory
x_refsource_UBUNTU
ADV-2008-2361
vdb-entry
x_refsource_VUPEN
27217
third-party-advisory
x_refsource_SECUNIA
31467
third-party-advisory
x_refsource_SECUNIA
27961
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0964
vendor-advisory
x_refsource_REDHAT
27870
third-party-advisory
x_refsource_SECUNIA
25831
vdb-entry
x_refsource_BID
DSA-1379
vendor-advisory
x_refsource_DEBIAN
ADV-2007-4042
vdb-entry
x_refsource_VUPEN
20071003 FLEA-2007-0058-1 openssl openssl-scripts
mailing-list
x_refsource_BUGTRAQ
27330
third-party-advisory
x_refsource_SECUNIA
30161
third-party-advisory
x_refsource_SECUNIA
GLSA-200805-07
vendor-advisory
x_refsource_GENTOO
http://www.vmware.com/security/advisories/VMSA-2008-0013.html
x_refsource_CONFIRM
28368
third-party-advisory
x_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1769
x_refsource_CONFIRM
27012
third-party-advisory
x_refsource_SECUNIA
3179
third-party-advisory
x_refsource_SREASON
http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm
x_refsource_CONFIRM
27229
third-party-advisory
x_refsource_SECUNIA
27051
third-party-advisory
x_refsource_SECUNIA
31326
third-party-advisory
x_refsource_SECUNIA
27078
third-party-advisory
x_refsource_SECUNIA
GLSA-200710-06
vendor-advisory
x_refsource_GENTOO
SSRT071499
vendor-advisory
x_refsource_HP
http://www.openssl.org/news/secadv_20071012.txt
x_refsource_CONFIRM
200858
vendor-advisory
x_refsource_SUNALERT
[4.0] 017: SECURITY FIX: October 10, 2007
vendor-advisory
x_refsource_OPENBSD
[4.2] 002: SECURITY FIX: October 10, 2007
vendor-advisory
x_refsource_OPENBSD
openssl-sslgetshared-bo(36837)
vdb-entry
x_refsource_XF
RHSA-2007:0813
vendor-advisory
x_refsource_REDHAT
SUSE-SR:2007:020
vendor-advisory
x_refsource_SUSE
ADV-2007-3325
vdb-entry
x_refsource_VUPEN
ADV-2007-4144
vdb-entry
x_refsource_VUPEN
http://www.vmware.com/security/advisories/VMSA-2008-0001.html
x_refsource_CONFIRM
ADV-2008-0064
vdb-entry
x_refsource_VUPEN
27021
third-party-advisory
x_refsource_SECUNIA
103130
vendor-advisory
x_refsource_SUNALERT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now