Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openssl openssl 0.9.7 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2010-2939
Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent malicious users to cause a denial of service (crash) and possibly execute ...
Openssl Openssl 0.9.7Openssl Openssl 0.9.8Openssl Openssl 1.0.0a
7.5
CVSSv2
CVE-2002-0657
Buffer overflow in OpenSSL 0.9.7 prior to 0.9.7-beta3, with Kerberos enabled, allows malicious users to execute arbitrary code via a long master key.
Openssl Openssl 0.9.7
7.5
CVSSv2
CVE-2003-0131
The SSL and TLS components for OpenSSL 0.9.6i and previous versions, 0.9.7, and 0.9.7a allow remote malicious users to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padd...
Openssl Openssl 0.9.6Openssl Openssl 0.9.6hOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6bOpenssl Openssl 0.9.7Openssl Openssl 0.9.7aOpenssl Openssl 0.9.6eOpenssl Openssl 0.9.6gOpenssl Openssl 0.9.6cOpenssl Openssl 0.9.6d
5
CVSSv2
CVE-2005-2969
The SSL/TLS server implementation in OpenSSL 0.9.7 prior to 0.9.7h and 0.9.8 prior to 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote malicious users t...
Openssl Openssl 0.9.7Openssl Openssl 0.9.7aOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.8Openssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7f
7.8
CVSSv2
CVE-2006-2937
OpenSSL 0.9.7 prior to 0.9.7l and 0.9.8 prior to 0.9.8d allows remote malicious users to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.
Openssl Openssl 0.9.7aOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.8Openssl Openssl 0.9.8aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7gOpenssl Openssl 0.9.7h
10
CVSSv2
CVE-2006-3738
Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 prior to 0.9.7l, 0.9.8 prior to 0.9.8d, and previous versions versions has unspecified impact and remote attack vectors involving a long list of ciphers.
Openssl Openssl 0.9.7Openssl Openssl 0.9.7gOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.8
6.8
CVSSv2
CVE-2007-5135
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote malicious users to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result ...
Openssl Openssl 0.9.7Openssl Openssl 0.9.7gOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8dOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.8Openssl Openssl 0.9.8f
5.1
CVSSv2
CVE-2005-1797
The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote malicious users to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations.
Openssl Openssl 0.9.1cOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.3Openssl Openssl 0.9.4Openssl Openssl 0.9.6jOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.6lOpenssl Openssl 0.9.6mOpenssl Openssl 0.9.7Openssl Openssl 0.9.6bOpenssl Openssl 0.9.6cOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6eOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.5aOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.5Openssl Openssl 0.9.6
4.3
CVSSv2
CVE-2006-4343
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 prior to 0.9.7l, 0.9.8 prior to 0.9.8d, and previous versions versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
Openssl Openssl 0.9.7fOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.8Openssl Openssl 0.9.8aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7hOpenssl Openssl 0.9.7iDebian Debian Linux 3.1Canonical Ubuntu Linux 5.04Canonical Ubuntu Linux 5.10Canonical Ubuntu Linux 6.06
7.8
CVSSv2
CVE-2006-2940
OpenSSL 0.9.7 prior to 0.9.7l, 0.9.8 prior to 0.9.8d, and previous versions versions allows malicious users to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certif...
Openssl Openssl 0.9.7aOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.8Openssl Openssl 0.9.6hOpenssl Openssl 0.9.6cOpenssl Openssl 0.9.6bOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.6eOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.5aOpenssl Openssl 0.9.3aOpenssl Openssl 0.9.6f
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook