CVE-2006-3738
- State
- Published
- Severity
- Not scored
- Published
- Sep 28, 2006
- Updated
- Aug 7, 2024
- Reserved
- Jul 20, 2006
Description
Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- MDKSA-2006:172vendor-advisory
- 22212third-party-advisory
- ADV-2006-4750vdb-entry
- http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html
- 23915third-party-advisory
- HPSBMA02250vendor-advisory
- 1016943vdb-entry
- 23038third-party-advisory
- 2006-0054vendor-advisory
- DSA-1195vendor-advisory
- 23309third-party-advisory
- http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
- ADV-2006-4401vdb-entry
- USN-353-1vendor-advisory
- http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227
- 22116third-party-advisory
- SSRT071304vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm
- GLSA-200612-11vendor-advisory
- VU#547300third-party-advisory
- 22166third-party-advisory
- RHSA-2006:0695vendor-advisory
- 23340third-party-advisory
- ADV-2006-4314vdb-entry
- 22385third-party-advisory
- SUSE-SR:2006:024vendor-advisory
- 22758third-party-advisory
- 22487third-party-advisory
- SUSE-SA:2006:058vendor-advisory
- 22772third-party-advisory
- SSRT071299vendor-advisory
- 22165third-party-advisory
- http://docs.info.apple.com/article.html?artnum=304829
- 20060928 [SECURITY] OpenSSL 0.9.8d and 0.9.7l releasedmailing-list
- 23794third-party-advisory
- SSRT090208vendor-advisory
- 22220third-party-advisory
- 23680third-party-advisory
- http://openvpn.net/changelog.html
- 25889third-party-advisory
- http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=498093&RenditionID=&poid=8881
- ADV-2006-4036vdb-entry
- [3.9] 20061007 013: SECURITY FIX: October 7, 2006vendor-advisory
- 30124third-party-advisory
- 22626third-party-advisory
- 22083vdb-entry
- MDKSA-2006:178vendor-advisory
- oval:org.mitre.oval:def:9370vdb-entrysignature
- ADV-2006-3869vdb-entry
- 22544third-party-advisory
- 22298third-party-advisory
- 22130third-party-advisory
- 31492third-party-advisory
- 22284third-party-advisory
- 24930third-party-advisory
- RHSA-2008:0629vendor-advisory
- GLSA-200610-11vendor-advisory
- oval:org.mitre.oval:def:4256vdb-entrysignature
- http://issues.rpath.com/browse/RPL-613
- 26329third-party-advisory
- 22260third-party-advisory
- http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf
- openssl-sslgetsharedciphers-bo(29237)vdb-entry
- ADV-2007-0343vdb-entry
- ADV-2006-3860vdb-entry
- 23280third-party-advisory
- 20060928 rPSA-2006-0175-1 openssl openssl-scriptsmailing-list
- http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm
- ADV-2006-4264vdb-entry
- 22193third-party-advisory
- 29262vdb-entry
- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
- 23155third-party-advisory
- 22799third-party-advisory
- SSA:2006-272-01vendor-advisory
- ADV-2006-4417vdb-entry
- http://www.serv-u.com/releasenotes/
- 20249vdb-entry
- ADV-2006-4443vdb-entry
- 30161third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
- http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html
- GLSA-200805-07vendor-advisory
- 22094third-party-advisory
- 22186third-party-advisory
- 22633third-party-advisory
- http://www.openssl.org/news/secadv_20060928.txt
- http://kolab.org/security/kolab-vendor-notice-11.txt
- ADV-2007-2315vdb-entry
- 22500third-party-advisory
- APPLE-SA-2006-11-28vendor-advisory
- TA06-333Athird-party-advisory
- 22216third-party-advisory
- ADV-2006-3820vdb-entry
- HPSBUX02174vendor-advisory
- OpenPKG-SA-2006.021vendor-advisory
- 22654third-party-advisory
- ADV-2007-1401vdb-entry
- 102711vendor-advisory
- 20070110 VMware ESX server security updatesmailing-list
- 20060929 rPSA-2006-0175-2 openssl openssl-scriptsmailing-list
- ADV-2006-3936vdb-entry
- 22240third-party-advisory
- 22330third-party-advisory
- http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
- DSA-1185vendor-advisory
- 22207third-party-advisory
- MDKSA-2006:177vendor-advisory
- 1017522vdb-entry
- 20061108 Multiple Vulnerabilities in OpenSSL Libraryvendor-advisory
- ADV-2006-3902vdb-entry
- ADV-2007-2783vdb-entry
- 20070602 Recent OpenSSL exploitsmailing-list
- 22259third-party-advisory
- 22460third-party-advisory
- 22791third-party-advisory
- 22172third-party-advisory
- http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
- FreeBSD-SA-06:23vendor-advisory
- 102668vendor-advisory
- 20061108 Multiple Vulnerabilities in OpenSSL libraryvendor-advisory
- 24950third-party-advisory
- 201531vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.