Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openssl openssl 0.9.6 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2009-0653
OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote malicious users to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970.
Openssl Openssl 0.9.6
7.5
CVSSv2
CVE-2003-0131
The SSL and TLS components for OpenSSL 0.9.6i and previous versions, 0.9.7, and 0.9.7a allow remote malicious users to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padd...
Openssl Openssl 0.9.6Openssl Openssl 0.9.6hOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6bOpenssl Openssl 0.9.7Openssl Openssl 0.9.7aOpenssl Openssl 0.9.6eOpenssl Openssl 0.9.6gOpenssl Openssl 0.9.6cOpenssl Openssl 0.9.6d
5
CVSSv2
CVE-2001-1141
The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL prior to 0.9.6b allows malicious users to use the output of small PRNG requests to determine the internal state information, which could be used by malicious users to predict future pseudo-random numbers.
Openssl Openssl 0.9.1cOpenssl Openssl 0.9.2bSsleay Ssleay 0.9Ssleay Ssleay 0.9.1Openssl Openssl 0.9.3Openssl Openssl 0.9.4Openssl Openssl 0.9.5Openssl Openssl 0.9.6Openssl Openssl 0.9.6aSsleay Ssleay 0.8.1
5
CVSSv2
CVE-2009-4355
Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and previous versions and 1.0.0 Beta through Beta 4 allows remote malicious users to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cl...
Openssl OpensslOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7eRedhat Openssl 0.9.7a-2Openssl Openssl 0.9.8fOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.7Openssl Openssl 0.9.7fOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.6Openssl Openssl 0.9.6cOpenssl Openssl 0.9.6bOpenssl Openssl 0.9.5Openssl Openssl 0.9.5aOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.7a
5.1
CVSSv2
CVE-2005-1797
The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote malicious users to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations.
Openssl Openssl 0.9.1cOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.3Openssl Openssl 0.9.4Openssl Openssl 0.9.6jOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.6lOpenssl Openssl 0.9.6mOpenssl Openssl 0.9.7Openssl Openssl 0.9.6bOpenssl Openssl 0.9.6cOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6eOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.5aOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.5Openssl Openssl 0.9.6
7.5
CVSSv2
CVE-2012-2110
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL prior to 0.9.8v, 1.0.0 prior to 1.0.0i, and 1.0.1 prior to 1.0.1a does not properly interpret integer data, which allows remote malicious users to conduct buffer overflow attacks, and cause a denial of service (m...
Openssl Openssl 1.0.0Openssl Openssl 1.0.0aOpenssl Openssl 1.0.0gOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0bOpenssl OpensslOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7dOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.6m
2.1
CVSSv2
CVE-2004-0975
The der_chop script in the openssl package in Trustix Secure Linux 1.5 up to and including 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
Mandrakesoft Mandrake Multi Network Firewall 8.2Openssl Openssl 0.9.6fOpenssl Openssl 0.9.6gOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.6bOpenssl Openssl 0.9.6cOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.6lOpenssl Openssl 0.9.6Openssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6jOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6eOpenssl Openssl 0.9.6mOpenssl Openssl 0.9.7cMandrakesoft Mandrake Linux 9.2Mandrakesoft Mandrake Linux Corporate Server 2.1Mandrakesoft Mandrake Linux 10.0Mandrakesoft Mandrake Linux 10.1Gentoo Linux
6.8
CVSSv2
CVE-2012-2333
Integer underflow in OpenSSL prior to 0.9.8x, 1.0.0 prior to 1.0.0j, and 1.0.1 prior to 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via ...
Openssl Openssl 0.9.8mOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8hOpenssl OpensslOpenssl Openssl 0.9.8vOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.7Openssl Openssl 0.9.7dOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.6Openssl Openssl 0.9.6bOpenssl Openssl 0.9.6eRedhat Openssl 0.9.6-15Openssl Openssl 0.9.8uOpenssl Openssl 0.9.8tOpenssl Openssl 0.9.8s
7.8
CVSSv2
CVE-2006-2940
OpenSSL 0.9.7 prior to 0.9.7l, 0.9.8 prior to 0.9.8d, and previous versions versions allows malicious users to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certif...
Openssl Openssl 0.9.7aOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.8Openssl Openssl 0.9.6hOpenssl Openssl 0.9.6cOpenssl Openssl 0.9.6bOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.6eOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.5aOpenssl Openssl 0.9.3aOpenssl Openssl 0.9.6f
4.3
CVSSv2
CVE-2006-4339
OpenSSL prior to 0.9.7, 0.9.7 prior to 0.9.7k, and 0.9.8 prior to 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote malicious users to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Open...
Openssl Openssl 0.9.7fOpenssl Openssl 0.9.7gOpenssl OpensslOpenssl Openssl 0.9.6gOpenssl Openssl 0.9.6jOpenssl Openssl 0.9.6lOpenssl Openssl 0.9.6Openssl Openssl 0.9.4Openssl Openssl 0.9.5Openssl Openssl 0.9.7aOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.5aOpenssl Openssl 0.9.6bOpenssl Openssl 0.9.3Openssl Openssl 0.9.2bOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.8a
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook