CVE-2006-4343
- State
- Published
- Severity
- Not scored
- Published
- Sep 28, 2006
- Updated
- Aug 7, 2024
- Reserved
- Aug 24, 2006
Description
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- MDKSA-2006:172vendor-advisory
- 22212third-party-advisory
- ADV-2006-4750vdb-entry
- 4773exploit
- http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html
- 23915third-party-advisory
- HPSBMA02250vendor-advisory
- 1016943vdb-entry
- 23038third-party-advisory
- 2006-0054vendor-advisory
- openssl-sslv2-client-dos(29240)vdb-entry
- DSA-1195vendor-advisory
- 23309third-party-advisory
- http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
- ADV-2006-4401vdb-entry
- USN-353-1vendor-advisory
- http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227
- 22116third-party-advisory
- SSRT071304vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm
- GLSA-200612-11vendor-advisory
- 22166third-party-advisory
- RHSA-2006:0695vendor-advisory
- 23340third-party-advisory
- 22385third-party-advisory
- SUSE-SR:2006:024vendor-advisory
- 22758third-party-advisory
- 22487third-party-advisory
- SUSE-SA:2006:058vendor-advisory
- 22772third-party-advisory
- SSRT071299vendor-advisory
- FreeBSD-SA-06:23.opensslvendor-advisory
- 22165third-party-advisory
- http://docs.info.apple.com/article.html?artnum=304829
- 20060928 [SECURITY] OpenSSL 0.9.8d and 0.9.7l releasedmailing-list
- 23794third-party-advisory
- SSRT090208vendor-advisory
- 22220third-party-advisory
- 23680third-party-advisory
- http://openvpn.net/changelog.html
- http://www.vmware.com/support/server/doc/releasenotes_server.html
- 25889third-party-advisory
- ADV-2006-4036vdb-entry
- [3.9] 20061007 013: SECURITY FIX: October 7, 2006vendor-advisory
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
- 30124third-party-advisory
- http://www.ingate.com/relnote-452.php
- 22626third-party-advisory
- 29263vdb-entry
- 22083vdb-entry
- MDKSA-2006:178vendor-advisory
- ADV-2006-3869vdb-entry
- 22544third-party-advisory
- 22298third-party-advisory
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html
- 22130third-party-advisory
- 25420third-party-advisory
- 31492third-party-advisory
- ADV-2007-1973vdb-entry
- 22284third-party-advisory
- oval:org.mitre.oval:def:4356vdb-entrysignature
- RHSA-2008:0629vendor-advisory
- GLSA-200610-11vendor-advisory
- http://issues.rpath.com/browse/RPL-613
- 26329third-party-advisory
- 22260third-party-advisory
- http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf
- ADV-2007-0343vdb-entry
- ADV-2006-3860vdb-entry
- 23280third-party-advisory
- 20060928 rPSA-2006-0175-1 openssl openssl-scriptsmailing-list
- oval:org.mitre.oval:def:10207vdb-entrysignature
- http://www.vmware.com/support/player/doc/releasenotes_player.html
- http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm
- ADV-2006-4264vdb-entry
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
- 22193third-party-advisory
- http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
- 23155third-party-advisory
- 22799third-party-advisory
- SSA:2006-272-01vendor-advisory
- ADV-2006-4417vdb-entry
- VU#386964third-party-advisory
- http://www.serv-u.com/releasenotes/
- ADV-2006-4443vdb-entry
- http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
- http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html
- 22094third-party-advisory
- 22186third-party-advisory
- http://www.openssl.org/news/secadv_20060928.txt
- http://kolab.org/security/kolab-vendor-notice-11.txt
- 22500third-party-advisory
- APPLE-SA-2006-11-28vendor-advisory
- TA06-333Athird-party-advisory
- 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issuesmailing-list
- 22216third-party-advisory
- ADV-2006-3820vdb-entry
- [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issuesmailing-list
- HPSBUX02174vendor-advisory
- OpenPKG-SA-2006.021vendor-advisory
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
- ADV-2008-0905vdb-entry
- ADV-2007-1401vdb-entry
- 102711vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0005.html
- 20070110 VMware ESX server security updatesmailing-list
- 20060929 rPSA-2006-0175-2 openssl openssl-scriptsmailing-list
- ADV-2006-3936vdb-entry
- 22240third-party-advisory
- 22330third-party-advisory
- http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
- DSA-1185vendor-advisory
- 22207third-party-advisory
- MDKSA-2006:177vendor-advisory
- 1017522vdb-entry
- 20061108 Multiple Vulnerabilities in OpenSSL Libraryvendor-advisory
- ADV-2006-3902vdb-entry
- ADV-2007-2783vdb-entry
- 22259third-party-advisory
- 22460third-party-advisory
- 22791third-party-advisory
- 22172third-party-advisory
- http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
- 28276vdb-entry
- 102668vendor-advisory
- 20246vdb-entry
- 20061108 Multiple Vulnerabilities in OpenSSL libraryvendor-advisory
- 24950third-party-advisory
- 201531vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.