Vulnerability Issues in OpenSSL
Chris Wysopal <[email protected]>
| Newsgroups | gmane.comp.security.vulnerabilities.watch.announce |
|---|---|
| Message-ID | <[email protected]> |
Full Advisory: http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm Vulnerability Issues in OpenSSL Version Information Advisory Reference 006489/OpenSSL Release Date 30 September 2003 Last Revision 30 September 2003 Version Number 1.1 What is Affected? All versions of OpenSSL up to and including 0.9.6j and 0.9.7b and all versions of SSLeay. (SSLeay is no longer maintained.) Severity Three specific vulnerabilities have been discovered in the OpenSSL libraries. Two of these could allow a Denial of Service attack, the third may result in an attacker being able to execute malicious code under certain conditions.