The SSL/TLS server implementation in OpenSSL 0.9.7 prior to 0.9.7h and 0.9.8 prior to 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote malicious users to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
openssl openssl 0.9.7 |
||
openssl openssl 0.9.7a |
||
openssl openssl 0.9.7b |
||
openssl openssl 0.9.7g |
||
openssl openssl 0.9.8 |
||
openssl openssl 0.9.7c |
||
openssl openssl 0.9.7d |
||
openssl openssl 0.9.7e |
||
openssl openssl 0.9.7f |
Vulmon