Test Kennung:	1.3.6.1.4.1.25623.1.0.100588
Kategorie:	Denial of Service
Titel:	OpenSSL 'dtls1_retrieve_buffered_fragment()' Remote Denial of Service Vulnerability
Zusammenfassung:	OpenSSL is prone to a denial of service (DoS) vulnerability; caused by a NULL-pointer dereference.
Beschreibung:	Summary: OpenSSL is prone to a denial of service (DoS) vulnerability caused by a NULL-pointer dereference. Vulnerability Impact: An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Affected Software/OS: OpenSSL versions 0.9.8m and prior are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0433 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX http://www.securityfocus.com/archive/1/516397/100/0/threaded 39461 http://secunia.com/advisories/39461 39932 http://secunia.com/advisories/39932 42724 http://secunia.com/advisories/42724 42733 http://secunia.com/advisories/42733 43311 http://secunia.com/advisories/43311 ADV-2010-0839 http://www.vupen.com/english/advisories/2010/0839 ADV-2010-0916 http://www.vupen.com/english/advisories/2010/0916 ADV-2010-0933 http://www.vupen.com/english/advisories/2010/0933 ADV-2010-1216 http://www.vupen.com/english/advisories/2010/1216 FEDORA-2010-5357 http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html FEDORA-2010-5744 http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html HPSBUX02517 http://marc.info/?l=bugtraq&m=127128920008563&w=2 HPSBUX02531 http://marc.info/?l=bugtraq&m=127557640302499&w=2 MDVSA-2010:076 http://www.mandriva.com/security/advisories?name=MDVSA-2010:076 SSRT100058 SSRT100108 [dovecot] 20100219 segfault - (imap|pop3)-login during nessus scan http://www.mail-archive.com/dovecot%40dovecot.org/msg26224.html [oss-security] 20100303 OpenSSL (with KRB5) remote crash - CVE-2010-0433 http://www.openwall.com/lists/oss-security/2010/03/03/5 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc http://cvs.openssl.org/chngview?cn=19374 http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7 http://www.openssl.org/news/changelog.html http://www.vmware.com/security/advisories/VMSA-2011-0003.html http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html https://bugzilla.redhat.com/show_bug.cgi?id=567711 https://bugzilla.redhat.com/show_bug.cgi?id=569774 https://kb.bluecoat.com/index?page=content&id=SA50 oval:org.mitre.oval:def:12260 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12260 oval:org.mitre.oval:def:6718 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6718 oval:org.mitre.oval:def:9856 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9856
Copyright	Copyright (C) 2010 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.