RHSA-2008:0525
Vulnerability from csaf_redhat - Published: 2008-06-30 15:36 - Updated: 2026-10-30 18:02Summary
Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update
Severity
Moderate
Notes
Topic: Red Hat Network Satellite Server version 4.2.3 is now available. This
update includes fixes for a number of security issues in Red Hat Network
Satellite Server Solaris client components.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details: This release corrects several security vulnerabilities in various
components shipped as part of the Red Hat Network Satellite Server Solaris
client. In a typical operating environment, these components are not used
by the Satellite Server in a vulnerable manner. These security updates will
reduce risk should these components be used by other applications.
Several flaws in Zlib was discovered. An attacker could create a
carefully-crafted compressed stream that would cause an application to
crash if the stream is opened by a user. (CVE-2005-2096). An attacker
could create a carefully crafted compressed stream that would cause an
application to crash if the stream is opened by a user. (CVE-2005-1849)
A buffer overflow was discovered in the OpenSSL SSL_get_shared_ciphers()
utility function. An attacker could send a list of ciphers to an
application that used this function and overrun a buffer (CVE-2006-3738).
A flaw in the SSLv2 client code was discovered. If a client application
used OpenSSL to create an SSLv2 connection to a malicious server, that
server could cause the client to crash. (CVE-2006-4343)
An attack on OpenSSL PKCS #1 v1.5 signatures was discovered. Where an RSA
key with exponent 3 is used it may be possible for an attacker to forge a
PKCS #1 v1.5 signature that would be incorrectly verified by
implementations that do not check for excess data in the RSA exponentiation
result of the signature. This issue affected applications that use OpenSSL
to verify X.509 certificates as well as other uses of PKCS #1 v1.5.
(CVE-2006-4339)
OpenSSL contained a software work-around for a bug in SSL handling in
Microsoft Internet Explorer version 3.0.2. It is enabled in most servers
that use OpenSSL to provide support for SSL and TLS. This work-around could
allow an attacker, acting as a "man in the middle" to force an SSL
connection to use SSL 2.0 rather than a stronger protocol, such as SSL 3.0
or TLS 1.0. (CVE-2005-2969)
During OpenSSL parsing of certain invalid ASN.1 structures an error
condition was mishandled. This can result in an infinite loop which
consumed system memory (CVE-2006-2937).
Certain public key types can take disproportionate amounts of time to
process in OpenSSL, leading to a denial of service. (CVE-2006-2940)
A flaw was discovered in the way that the Python repr() function handled
UTF-32/UCS-4 strings. If an application written in Python used the repr()
function on untrusted data, this could lead to a denial of service or
possibly allow the execution of arbitrary code with the privileges of the
Python application. (CVE-2006-4980)
A flaw was discovered in the strxfrm() function of Python's locale module.
Strings generated by this function were not properly NULL-terminated. This
may possibly cause disclosure of data stored in the memory of a Python
application using this function. (CVE-2007-2052)
Multiple integer overflow flaws were discovered in Python's imageop module.
If an application written in Python used the imageop module to process
untrusted images, it could cause the application to crash, enter an
infinite loop, or possibly execute arbitrary code with the privileges of
the Python interpreter. (CVE-2007-4965)
A stack-based buffer overflow was discovered in the Python interpreter,
which could allow a local user to gain privileges by running a script with
a long name from the current working directory. (CVE-2006-1542)
Users of Red Hat Network Satellite Server should upgrade to these updated
packages, which contain backported patches to correct these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Important
The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Moderate
Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Low
OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Low
OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification.
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Moderate
Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Important
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.
9.1 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Critical
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Low
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Important
Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
CWE-193 - Off-by-one ErrorAffected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Low
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
Affected products
Fixed
4 products, the same list as for
CVE-2005-1849
Threats
Impact
Moderate
References
261 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Network Satellite Server version 4.2.3 is now available. This\nupdate includes fixes for a number of security issues in Red Hat Network\nSatellite Server Solaris client components.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "This release corrects several security vulnerabilities in various\ncomponents shipped as part of the Red Hat Network Satellite Server Solaris\nclient. In a typical operating environment, these components are not used\nby the Satellite Server in a vulnerable manner. These security updates will\nreduce risk should these components be used by other applications.\n\nSeveral flaws in Zlib was discovered. An attacker could create a\ncarefully-crafted compressed stream that would cause an application to\ncrash if the stream is opened by a user. (CVE-2005-2096). An attacker\ncould create a carefully crafted compressed stream that would cause an\napplication to crash if the stream is opened by a user. (CVE-2005-1849)\n\nA buffer overflow was discovered in the OpenSSL SSL_get_shared_ciphers()\nutility function. An attacker could send a list of ciphers to an\napplication that used this function and overrun a buffer (CVE-2006-3738).\n\nA flaw in the SSLv2 client code was discovered. If a client application\nused OpenSSL to create an SSLv2 connection to a malicious server, that\nserver could cause the client to crash. (CVE-2006-4343)\n\nAn attack on OpenSSL PKCS #1 v1.5 signatures was discovered. Where an RSA\nkey with exponent 3 is used it may be possible for an attacker to forge a\nPKCS #1 v1.5 signature that would be incorrectly verified by\nimplementations that do not check for excess data in the RSA exponentiation\nresult of the signature. This issue affected applications that use OpenSSL\nto verify X.509 certificates as well as other uses of PKCS #1 v1.5.\n(CVE-2006-4339)\n\nOpenSSL contained a software work-around for a bug in SSL handling in\nMicrosoft Internet Explorer version 3.0.2. It is enabled in most servers\nthat use OpenSSL to provide support for SSL and TLS. This work-around could\nallow an attacker, acting as a \"man in the middle\" to force an SSL\nconnection to use SSL 2.0 rather than a stronger protocol, such as SSL 3.0\nor TLS 1.0. (CVE-2005-2969)\n\nDuring OpenSSL parsing of certain invalid ASN.1 structures an error\ncondition was mishandled. This can result in an infinite loop which\nconsumed system memory (CVE-2006-2937). \n\nCertain public key types can take disproportionate amounts of time to\nprocess in OpenSSL, leading to a denial of service. (CVE-2006-2940)\n\nA flaw was discovered in the way that the Python repr() function handled\nUTF-32/UCS-4 strings. If an application written in Python used the repr()\nfunction on untrusted data, this could lead to a denial of service or\npossibly allow the execution of arbitrary code with the privileges of the\nPython application. (CVE-2006-4980)\n\nA flaw was discovered in the strxfrm() function of Python\u0027s locale module.\nStrings generated by this function were not properly NULL-terminated. This\nmay possibly cause disclosure of data stored in the memory of a Python\napplication using this function. (CVE-2007-2052)\n\nMultiple integer overflow flaws were discovered in Python\u0027s imageop module.\nIf an application written in Python used the imageop module to process\nuntrusted images, it could cause the application to crash, enter an\ninfinite loop, or possibly execute arbitrary code with the privileges of\nthe Python interpreter. (CVE-2007-4965)\n\nA stack-based buffer overflow was discovered in the Python interpreter,\nwhich could allow a local user to gain privileges by running a script with\na long name from the current working directory. (CVE-2006-1542)\n\nUsers of Red Hat Network Satellite Server should upgrade to these updated\npackages, which contain backported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2008:0525",
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "235093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
},
{
"category": "external",
"summary": "295971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
},
{
"category": "external",
"summary": "430640",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430640"
},
{
"category": "external",
"summary": "430641",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430641"
},
{
"category": "external",
"summary": "430649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430649"
},
{
"category": "external",
"summary": "430650",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650"
},
{
"category": "external",
"summary": "430651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430651"
},
{
"category": "external",
"summary": "430652",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430652"
},
{
"category": "external",
"summary": "430654",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430654"
},
{
"category": "external",
"summary": "430655",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430655"
},
{
"category": "external",
"summary": "430659",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430659"
},
{
"category": "external",
"summary": "430660",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430660"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0525.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update",
"tracking": {
"current_release_date": "2026-10-30T18:02:10+00:00",
"generator": {
"date": "2026-10-30T18:02:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2008:0525",
"initial_release_date": "2008-06-30T15:36:00+00:00",
"revision_history": [
{
"date": "2008-06-30T15:36:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2008-06-30T11:36:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-30T18:02:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite v 4.2 (RHEL v.3 AS)",
"product": {
"name": "Red Hat Satellite v 4.2 (RHEL v.3 AS)",
"product_id": "3AS-RHNSAT4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:4.2::el3"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite v 4.2 (RHEL v.4 AS)",
"product": {
"name": "Red Hat Satellite v 4.2 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:4.2::el4"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"product": {
"name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"product_id": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhn-solaris-bootstrap@5.0.2-3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"product": {
"name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"product_id": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhn_solaris_bootstrap_5_0_2_3@1-0?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
"product_id": "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch"
},
"product_reference": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"relates_to_product_reference": "3AS-RHNSAT4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
"product_id": "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
},
"product_reference": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"relates_to_product_reference": "3AS-RHNSAT4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch"
},
"product_reference": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"relates_to_product_reference": "4AS-RHNSAT4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
"product_id": "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
},
"product_reference": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"relates_to_product_reference": "4AS-RHNSAT4.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2005-1849",
"discovery_date": "2006-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430649"
}
],
"notes": [
{
"category": "description",
"text": "inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "zlib DoS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-1849"
},
{
"category": "external",
"summary": "RHBZ#430649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430649"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-1849",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-1849"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-1849",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1849"
}
],
"release_date": "2005-08-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "zlib DoS"
},
{
"cve": "CVE-2005-2096",
"discovery_date": "2006-06-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430650"
}
],
"notes": [
{
"category": "description",
"text": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "zlib DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-2096"
},
{
"category": "external",
"summary": "RHBZ#430650",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-2096",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096"
}
],
"release_date": "2005-07-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "zlib DoS"
},
{
"cve": "CVE-2005-2969",
"discovery_date": "2005-10-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430660"
}
],
"notes": [
{
"category": "description",
"text": "The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl mitm downgrade attack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-2969"
},
{
"category": "external",
"summary": "RHBZ#430660",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430660"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-2969",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2969"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2969",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2969"
}
],
"release_date": "2005-10-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl mitm downgrade attack"
},
{
"cve": "CVE-2006-1542",
"discovery_date": "2006-03-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430640"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a \"stack overflow,\" and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-1542"
},
{
"category": "external",
"summary": "RHBZ#430640",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430640"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-1542",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-1542"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-1542",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1542"
}
],
"release_date": "2005-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python buffer overflow"
},
{
"cve": "CVE-2006-2937",
"discovery_date": "2006-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430655"
}
],
"notes": [
{
"category": "description",
"text": "OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl ASN.1 DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-2937"
},
{
"category": "external",
"summary": "RHBZ#430655",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430655"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-2937",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-2937"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2937",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2937"
}
],
"release_date": "2006-09-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl ASN.1 DoS"
},
{
"cve": "CVE-2006-2940",
"discovery_date": "2006-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430654"
}
],
"notes": [
{
"category": "description",
"text": "OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl public key DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-2940"
},
{
"category": "external",
"summary": "RHBZ#430654",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430654"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2940"
}
],
"release_date": "2006-09-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl public key DoS"
},
{
"cve": "CVE-2006-3738",
"discovery_date": "2006-08-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430652"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl get_shared_ciphers overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-3738"
},
{
"category": "external",
"summary": "RHBZ#430652",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430652"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-3738",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3738"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3738",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3738"
}
],
"release_date": "2006-09-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl get_shared_ciphers overflow"
},
{
"cve": "CVE-2006-4339",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-04-02T14:45:30.311567+00:00",
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.509 and other certificates, leading to a bypass of trust and authentication mechanisms.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: OpenSSL: Signature forgery via improper PKCS-1 padding removal leading to certificate validation bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-4339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-4339",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4339"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339"
},
{
"category": "external",
"summary": "http://dev2dev.bea.com/pub/advisory/238",
"url": "http://dev2dev.bea.com/pub/advisory/238"
},
{
"category": "external",
"summary": "http://docs.info.apple.com/article.html?artnum=304829",
"url": "http://docs.info.apple.com/article.html?artnum=304829"
},
{
"category": "external",
"summary": "http://docs.info.apple.com/article.html?artnum=307177",
"url": "http://docs.info.apple.com/article.html?artnum=307177"
},
{
"category": "external",
"summary": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01070495",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01070495"
},
{
"category": "external",
"summary": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771"
},
{
"category": "external",
"summary": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540",
"url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540"
},
{
"category": "external",
"summary": "http://jvn.jp/en/jp/JVN51615542/index.html",
"url": "http://jvn.jp/en/jp/JVN51615542/index.html"
},
{
"category": "external",
"summary": "http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html",
"url": "http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html"
},
{
"category": "external",
"summary": "http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html",
"url": "http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html"
},
{
"category": "external",
"summary": "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html",
"url": "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html"
},
{
"category": "external",
"summary": "http://lists.vmware.com/pipermail/security-announce/2008/000008.html",
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000008.html"
},
{
"category": "external",
"summary": "http://marc.info/?l=bind-announce\u0026m=116253119512445\u0026w=2",
"url": "http://marc.info/?l=bind-announce\u0026m=116253119512445\u0026w=2"
},
{
"category": "external",
"summary": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2",
"url": "http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2"
},
{
"category": "external",
"summary": "http://openvpn.net/changelog.html",
"url": "http://openvpn.net/changelog.html"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21709",
"url": "http://secunia.com/advisories/21709"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21767",
"url": "http://secunia.com/advisories/21767"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21776",
"url": "http://secunia.com/advisories/21776"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21778",
"url": "http://secunia.com/advisories/21778"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21785",
"url": "http://secunia.com/advisories/21785"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21791",
"url": "http://secunia.com/advisories/21791"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21812",
"url": "http://secunia.com/advisories/21812"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21823",
"url": "http://secunia.com/advisories/21823"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21846",
"url": "http://secunia.com/advisories/21846"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21852",
"url": "http://secunia.com/advisories/21852"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21870",
"url": "http://secunia.com/advisories/21870"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21873",
"url": "http://secunia.com/advisories/21873"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21906",
"url": "http://secunia.com/advisories/21906"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21927",
"url": "http://secunia.com/advisories/21927"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21930",
"url": "http://secunia.com/advisories/21930"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/21982",
"url": "http://secunia.com/advisories/21982"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22036",
"url": "http://secunia.com/advisories/22036"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22044",
"url": "http://secunia.com/advisories/22044"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22066",
"url": "http://secunia.com/advisories/22066"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22161",
"url": "http://secunia.com/advisories/22161"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22226",
"url": "http://secunia.com/advisories/22226"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22232",
"url": "http://secunia.com/advisories/22232"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22259",
"url": "http://secunia.com/advisories/22259"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22260",
"url": "http://secunia.com/advisories/22260"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22284",
"url": "http://secunia.com/advisories/22284"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22325",
"url": "http://secunia.com/advisories/22325"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22446",
"url": "http://secunia.com/advisories/22446"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22509",
"url": "http://secunia.com/advisories/22509"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22513",
"url": "http://secunia.com/advisories/22513"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22523",
"url": "http://secunia.com/advisories/22523"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22545",
"url": "http://secunia.com/advisories/22545"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22585",
"url": "http://secunia.com/advisories/22585"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22671",
"url": "http://secunia.com/advisories/22671"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22689",
"url": "http://secunia.com/advisories/22689"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22711",
"url": "http://secunia.com/advisories/22711"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22733",
"url": "http://secunia.com/advisories/22733"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22758",
"url": "http://secunia.com/advisories/22758"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22799",
"url": "http://secunia.com/advisories/22799"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22932",
"url": "http://secunia.com/advisories/22932"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22934",
"url": "http://secunia.com/advisories/22934"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22936",
"url": "http://secunia.com/advisories/22936"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22937",
"url": "http://secunia.com/advisories/22937"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22938",
"url": "http://secunia.com/advisories/22938"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22939",
"url": "http://secunia.com/advisories/22939"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22940",
"url": "http://secunia.com/advisories/22940"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22948",
"url": "http://secunia.com/advisories/22948"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/22949",
"url": "http://secunia.com/advisories/22949"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23155",
"url": "http://secunia.com/advisories/23155"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23455",
"url": "http://secunia.com/advisories/23455"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23680",
"url": "http://secunia.com/advisories/23680"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23794",
"url": "http://secunia.com/advisories/23794"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23841",
"url": "http://secunia.com/advisories/23841"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/23915",
"url": "http://secunia.com/advisories/23915"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/24099",
"url": "http://secunia.com/advisories/24099"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/24930",
"url": "http://secunia.com/advisories/24930"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/24950",
"url": "http://secunia.com/advisories/24950"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/25284",
"url": "http://secunia.com/advisories/25284"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/25399",
"url": "http://secunia.com/advisories/25399"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/25649",
"url": "http://secunia.com/advisories/25649"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/26329",
"url": "http://secunia.com/advisories/26329"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/26893",
"url": "http://secunia.com/advisories/26893"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/28115",
"url": "http://secunia.com/advisories/28115"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/31492",
"url": "http://secunia.com/advisories/31492"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/38567",
"url": "http://secunia.com/advisories/38567"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/38568",
"url": "http://secunia.com/advisories/38568"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/41818",
"url": "http://secunia.com/advisories/41818"
},
{
"category": "external",
"summary": "http://secunia.com/advisories/60799",
"url": "http://secunia.com/advisories/60799"
},
{
"category": "external",
"summary": "http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc",
"url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc"
},
{
"category": "external",
"summary": "http://security.gentoo.org/glsa/glsa-200609-05.xml",
"url": "http://security.gentoo.org/glsa/glsa-200609-05.xml"
},
{
"category": "external",
"summary": "http://security.gentoo.org/glsa/glsa-200609-18.xml",
"url": "http://security.gentoo.org/glsa/glsa-200609-18.xml"
},
{
"category": "external",
"summary": "http://securitytracker.com/id?1016791",
"url": "http://securitytracker.com/id?1016791"
},
{
"category": "external",
"summary": "http://securitytracker.com/id?1017522",
"url": "http://securitytracker.com/id?1017522"
},
{
"category": "external",
"summary": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.566955",
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.566955"
},
{
"category": "external",
"summary": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.605306",
"url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.605306"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1"
},
{
"category": "external",
"summary": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1"
},
{
"category": "external",
"summary": "http://support.attachmate.com/techdocs/2127.html",
"url": "http://support.attachmate.com/techdocs/2127.html"
},
{
"category": "external",
"summary": "http://support.attachmate.com/techdocs/2128.html",
"url": "http://support.attachmate.com/techdocs/2128.html"
},
{
"category": "external",
"summary": "http://support.attachmate.com/techdocs/2137.html",
"url": "http://support.attachmate.com/techdocs/2137.html"
},
{
"category": "external",
"summary": "http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm"
},
{
"category": "external",
"summary": "http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf",
"url": "http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf"
},
{
"category": "external",
"summary": "http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html",
"url": "http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html"
},
{
"category": "external",
"summary": "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html",
"url": "http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html"
},
{
"category": "external",
"summary": "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml",
"url": "http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml"
},
{
"category": "external",
"summary": "http://www.debian.org/security/2006/dsa-1174",
"url": "http://www.debian.org/security/2006/dsa-1174"
},
{
"category": "external",
"summary": "http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml"
},
{
"category": "external",
"summary": "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml",
"url": "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml"
},
{
"category": "external",
"summary": "http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html",
"url": "http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html"
},
{
"category": "external",
"summary": "http://www.kb.cert.org/vuls/id/845620",
"url": "http://www.kb.cert.org/vuls/id/845620"
},
{
"category": "external",
"summary": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:161",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:161"
},
{
"category": "external",
"summary": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:177"
},
{
"category": "external",
"summary": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:178"
},
{
"category": "external",
"summary": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:207",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:207"
},
{
"category": "external",
"summary": "http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/",
"url": "http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/"
},
{
"category": "external",
"summary": "http://www.novell.com/linux/security/advisories/2006_26_sr.html",
"url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html"
},
{
"category": "external",
"summary": "http://www.novell.com/linux/security/advisories/2006_55_ssl.html",
"url": "http://www.novell.com/linux/security/advisories/2006_55_ssl.html"
},
{
"category": "external",
"summary": "http://www.novell.com/linux/security/advisories/2006_61_opera.html",
"url": "http://www.novell.com/linux/security/advisories/2006_61_opera.html"
},
{
"category": "external",
"summary": "http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html",
"url": "http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html"
},
{
"category": "external",
"summary": "http://www.openbsd.org/errata.html",
"url": "http://www.openbsd.org/errata.html"
},
{
"category": "external",
"summary": "http://www.openoffice.org/security/cves/CVE-2006-4339.html",
"url": "http://www.openoffice.org/security/cves/CVE-2006-4339.html"
},
{
"category": "external",
"summary": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html",
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html"
},
{
"category": "external",
"summary": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html",
"url": "http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html"
},
{
"category": "external",
"summary": "http://www.openssl.org/news/secadv_20060905.txt",
"url": "http://www.openssl.org/news/secadv_20060905.txt"
},
{
"category": "external",
"summary": "http://www.opera.com/support/search/supsearch.dml?index=845",
"url": "http://www.opera.com/support/search/supsearch.dml?index=845"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html",
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html"
},
{
"category": "external",
"summary": "http://www.osvdb.org/28549",
"url": "http://www.osvdb.org/28549"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2006-0661.html",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0661.html"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2007-0062.html",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0062.html"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2007-0072.html",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0072.html"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2007-0073.html",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0073.html"
},
{
"category": "external",
"summary": "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/445231/100/0/threaded",
"url": "http://www.securityfocus.com/archive/1/445231/100/0/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/445822/100/0/threaded",
"url": "http://www.securityfocus.com/archive/1/445822/100/0/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/450327/100/0/threaded",
"url": "http://www.securityfocus.com/archive/1/450327/100/0/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/456546/100/200/threaded",
"url": "http://www.securityfocus.com/archive/1/456546/100/200/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/archive/1/489739/100/0/threaded",
"url": "http://www.securityfocus.com/archive/1/489739/100/0/threaded"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/bid/19849",
"url": "http://www.securityfocus.com/bid/19849"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/bid/22083",
"url": "http://www.securityfocus.com/bid/22083"
},
{
"category": "external",
"summary": "http://www.securityfocus.com/bid/28276",
"url": "http://www.securityfocus.com/bid/28276"
},
{
"category": "external",
"summary": "http://www.serv-u.com/releasenotes/",
"url": "http://www.serv-u.com/releasenotes/"
},
{
"category": "external",
"summary": "http://www.sybase.com/detail?id=1047991",
"url": "http://www.sybase.com/detail?id=1047991"
},
{
"category": "external",
"summary": "http://www.ubuntu.com/usn/usn-339-1",
"url": "http://www.ubuntu.com/usn/usn-339-1"
},
{
"category": "external",
"summary": "http://www.us-cert.gov/cas/techalerts/TA06-333A.html",
"url": "http://www.us-cert.gov/cas/techalerts/TA06-333A.html"
},
{
"category": "external",
"summary": "http://www.us.debian.org/security/2006/dsa-1173",
"url": "http://www.us.debian.org/security/2006/dsa-1173"
},
{
"category": "external",
"summary": "http://www.vmware.com/security/advisories/VMSA-2008-0005.html",
"url": "http://www.vmware.com/security/advisories/VMSA-2008-0005.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html",
"url": "http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html",
"url": "http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html",
"url": "http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html",
"url": "http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html",
"url": "http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/player/doc/releasenotes_player.html",
"url": "http://www.vmware.com/support/player/doc/releasenotes_player.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/player2/doc/releasenotes_player2.html",
"url": "http://www.vmware.com/support/player2/doc/releasenotes_player2.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/server/doc/releasenotes_server.html",
"url": "http://www.vmware.com/support/server/doc/releasenotes_server.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html",
"url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html",
"url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html",
"url": "http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html"
},
{
"category": "external",
"summary": "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html",
"url": "http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3453",
"url": "http://www.vupen.com/english/advisories/2006/3453"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3566",
"url": "http://www.vupen.com/english/advisories/2006/3566"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3730",
"url": "http://www.vupen.com/english/advisories/2006/3730"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3748",
"url": "http://www.vupen.com/english/advisories/2006/3748"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3793",
"url": "http://www.vupen.com/english/advisories/2006/3793"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3899",
"url": "http://www.vupen.com/english/advisories/2006/3899"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/3936",
"url": "http://www.vupen.com/english/advisories/2006/3936"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4205",
"url": "http://www.vupen.com/english/advisories/2006/4205"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4206",
"url": "http://www.vupen.com/english/advisories/2006/4206"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4207",
"url": "http://www.vupen.com/english/advisories/2006/4207"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4216",
"url": "http://www.vupen.com/english/advisories/2006/4216"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4327",
"url": "http://www.vupen.com/english/advisories/2006/4327"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4329",
"url": "http://www.vupen.com/english/advisories/2006/4329"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4366",
"url": "http://www.vupen.com/english/advisories/2006/4366"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4417",
"url": "http://www.vupen.com/english/advisories/2006/4417"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4586",
"url": "http://www.vupen.com/english/advisories/2006/4586"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4744",
"url": "http://www.vupen.com/english/advisories/2006/4744"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/4750",
"url": "http://www.vupen.com/english/advisories/2006/4750"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2006/5146",
"url": "http://www.vupen.com/english/advisories/2006/5146"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/0254",
"url": "http://www.vupen.com/english/advisories/2007/0254"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/0343",
"url": "http://www.vupen.com/english/advisories/2007/0343"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/1401",
"url": "http://www.vupen.com/english/advisories/2007/1401"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/1815",
"url": "http://www.vupen.com/english/advisories/2007/1815"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/1945",
"url": "http://www.vupen.com/english/advisories/2007/1945"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/2163",
"url": "http://www.vupen.com/english/advisories/2007/2163"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/2315",
"url": "http://www.vupen.com/english/advisories/2007/2315"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/2783",
"url": "http://www.vupen.com/english/advisories/2007/2783"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2007/4224",
"url": "http://www.vupen.com/english/advisories/2007/4224"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2008/0905/references",
"url": "http://www.vupen.com/english/advisories/2008/0905/references"
},
{
"category": "external",
"summary": "http://www.vupen.com/english/advisories/2010/0366",
"url": "http://www.vupen.com/english/advisories/2010/0366"
},
{
"category": "external",
"summary": "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742",
"url": "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742"
},
{
"category": "external",
"summary": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117",
"url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=3117"
},
{
"category": "external",
"summary": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28755",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28755"
},
{
"category": "external",
"summary": "https://issues.rpath.com/browse/RPL-1633",
"url": "https://issues.rpath.com/browse/RPL-1633"
},
{
"category": "external",
"summary": "https://issues.rpath.com/browse/RPL-616",
"url": "https://issues.rpath.com/browse/RPL-616"
},
{
"category": "external",
"summary": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656"
},
{
"category": "external",
"summary": "https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html",
"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html"
},
{
"category": "external",
"summary": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144",
"url": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144"
}
],
"release_date": "2006-09-05T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "OpenSSL: OpenSSL: Signature forgery via improper PKCS-1 padding removal leading to certificate validation bypass"
},
{
"cve": "CVE-2006-4343",
"discovery_date": "2006-08-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430651"
}
],
"notes": [
{
"category": "description",
"text": "The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl sslv2 client code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-4343"
},
{
"category": "external",
"summary": "RHBZ#430651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430651"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-4343",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4343"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4343",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4343"
}
],
"release_date": "2006-09-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl sslv2 client code"
},
{
"cve": "CVE-2006-4980",
"discovery_date": "2006-09-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "430641"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python repr unicode buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-4980"
},
{
"category": "external",
"summary": "RHBZ#430641",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=430641"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-4980",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4980"
}
],
"release_date": "2006-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python repr unicode buffer overflow"
},
{
"cve": "CVE-2007-2052",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2007-04-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "235093"
}
],
"notes": [
{
"category": "description",
"text": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python off-by-one locale.strxfrm() (possible memory disclosure)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-2052"
},
{
"category": "external",
"summary": "RHBZ#235093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-2052",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2052"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052"
}
],
"release_date": "2007-04-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python off-by-one locale.strxfrm() (possible memory disclosure)"
},
{
"cve": "CVE-2007-4965",
"discovery_date": "2007-09-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "295971"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python imageop module heap corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=295971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-4965"
},
{
"category": "external",
"summary": "RHBZ#295971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-4965",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965"
}
],
"release_date": "2007-09-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2008-06-30T15:36:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
"4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
"4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0525"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python imageop module heap corruption"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.