sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG prior to 1.2.2 and other products, when SSL is enabled, allows remote malicious users to cause a denial of service (daemon outage) by connecting to the SSL port but not participating in an SSL handshake.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apache qpid 0.6 |
||
apache qpid 0.5 |
||
redhat enterprise_mrg |
||
redhat enterprise_mrg 1.1.2 |
||
redhat enterprise_mrg 1.0.3 |
||
redhat enterprise_mrg 1.1.1 |
||
redhat enterprise_mrg 1.0.2 |
||
redhat enterprise_mrg 1.0.1 |
||
redhat enterprise_mrg 1.0 |