CVE-2007-5135
- State
- Published
- Severity
- Not scored
- Published
- Sep 27, 2007
- Updated
- Aug 7, 2024
- Reserved
- Sep 27, 2007
Description
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://bugs.gentoo.org/show_bug.cgi?id=194039
- HPSBUX02292vendor-advisory
- oval:org.mitre.oval:def:5337vdb-entrysignature
- 20071001 Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflowmailing-list
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0241
- 27205third-party-advisory
- 27097third-party-advisory
- ADV-2008-2362vdb-entry
- 1018755vdb-entry
- 31489third-party-advisory
- APPLE-SA-2008-07-31vendor-advisory
- FEDORA-2007-725vendor-advisory
- RHSA-2007:1003vendor-advisory
- 29242third-party-advisory
- MDKSA-2007:193vendor-advisory
- https://issues.rpath.com/browse/RPL-1770
- 27186third-party-advisory
- 27851third-party-advisory
- ADV-2008-2268vdb-entry
- 30124third-party-advisory
- SUSE-SR:2008:005vendor-advisory
- 27394third-party-advisory
- [4.1] 011: SECURITY FIX: October 10, 2007vendor-advisory
- 20071004 Re: OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflowmailing-list
- oval:org.mitre.oval:def:10904vdb-entrysignature
- 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packagesmailing-list
- 31308third-party-advisory
- 22130third-party-advisory
- 27031third-party-advisory
- [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packagesmailing-list
- ADV-2007-3625vdb-entry
- 20070927 OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflowmailing-list
- FreeBSD-SA-07:08vendor-advisory
- USN-522-1vendor-advisory
- ADV-2008-2361vdb-entry
- 27217third-party-advisory
- 31467third-party-advisory
- 27961third-party-advisory
- RHSA-2007:0964vendor-advisory
- 27870third-party-advisory
- 25831vdb-entry
- DSA-1379vendor-advisory
- ADV-2007-4042vdb-entry
- 20071003 FLEA-2007-0058-1 openssl openssl-scriptsmailing-list
- 27330third-party-advisory
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4038
- 30161third-party-advisory
- GLSA-200805-07vendor-advisory
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4037
- http://www.vmware.com/security/advisories/VMSA-2008-0013.html
- 28368third-party-advisory
- https://issues.rpath.com/browse/RPL-1769
- 27012third-party-advisory
- 3179third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm
- 27229third-party-advisory
- 27051third-party-advisory
- 31326third-party-advisory
- 27078third-party-advisory
- GLSA-200710-06vendor-advisory
- http://www.openssl.org/news/secadv_20071012.txt
- 200858vendor-advisory
- [4.0] 017: SECURITY FIX: October 10, 2007vendor-advisory
- [4.2] 002: SECURITY FIX: October 10, 2007vendor-advisory
- openssl-sslgetshared-bo(36837)vdb-entry
- RHSA-2007:0813vendor-advisory
- SUSE-SR:2007:020vendor-advisory
- ADV-2007-3325vdb-entry
- ADV-2007-4144vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2008-0001.html
- ADV-2008-0064vdb-entry
- 27021third-party-advisory
- 103130vendor-advisory
- 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packagesmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.