[Forgot Password]
Login  Register Subscribe

23631

 
 

121614

 
 

98503

 
 

909

 
 

79321

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2009-3245

Date: (C)2010-03-05   (M)2017-12-01 


OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.

CVSS Score: 10.0Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECUNIA-37291
BID-38562
SECUNIA-38761
SECUNIA-39461
SECUNIA-39932
SECUNIA-42724
SECUNIA-42733
ADV-2010-0839
ADV-2010-0916
ADV-2010-0933
ADV-2010-1216
APPLE-SA-2011-06-23-1
FEDORA-2010-5357
FEDORA-2010-5744
HPSBOV02540
MDVSA-2010:076
RHSA-2010:0977
RHSA-2011:0896
SSA:2010-060-02
SSRT100058
SUSE-SR:2010:013
USN-1003-1
http://marc.info/?l=openssl-cvs&m=126692180606861&w=2
http://marc.info/?l=openssl-cvs&m=126692159706582&w=2
http://marc.info/?l=openssl-cvs&m=126692170906712&w=2
https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html
https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc
http://support.apple.com/kb/HT4723
https://kb.bluecoat.com/index?page=content&id=SA50

CPE    13
cpe:/a:openssl:openssl:0.9.8
cpe:/a:openssl:openssl:0.9.8g
cpe:/a:openssl:openssl:0.9.8h
cpe:/a:openssl:openssl:0.9.8i
...
CWE    1
CWE-20
OVAL    22
oval:org.secpod.oval:def:201784
oval:org.secpod.oval:def:20046
oval:org.secpod.oval:def:201945
oval:org.secpod.oval:def:500360
...

© 2013 SecPod Technologies