Updated OpenSSL packages are available which fix several serious buffer overflow vulnerabilities.

OpenSSL is a commercial-grade, full-featured, and Open Source toolkit which implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. A security audit of the OpenSSL code sponsored by DARPA found several buffer overflows in OpenSSL which affect versions 0.9.7 and 0.9.6d and earlier :

1. The master key supplied by a client to an SSL version 2 server could be oversized, causing a stack-based buffer overflow. This issue is remotely exploitable. Services that have SSLv2 disabled would not be vulnerable to this issue. (CVE-2002-0656)

2. The SSLv3 session ID supplied to a client from a malicious server could be oversized and overrun a buffer. This issue looks to be remotely exploitable. (CVE-2002-0656)

3. Various buffers used for storing ASCII representations of integers were too small on 64 bit platforms. This issue may be exploitable.
(CVE-2002-0655)

A further issue was found in OpenSSL 0.9.7 that does not affect versions of OpenSSL shipped with Red Hat Linux (CVE-2002-0657).

A large number of applications within Red Hat Linux make use the OpenSSL library to provide SSL support. All users are therefore advised to upgrade to the errata OpenSSL packages, which contain patches to correct these vulnerabilities.

NOTE :

Please read the Solution section below as it contains instructions for making sure that all SSL-enabled processes are restarted after the update is applied.

Thanks go to the OpenSSL team and Ben Laurie for providing patches for these issues.

The version of OpenSSL installed on the remote host is prior to 0.9.6f. It is, therefore, affected by a vulnerability as referenced in the 0.9.6f advisory.

  - OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms,     which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL     to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not     properly handled in s2_srvr.c. (CVE-2002-1568)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

远程主机上安装的 OpenSSL 版本低于 0.9.6f。因此，该应用程序受到 0.9.6f 公告中提及的漏洞的影响。

  - OpenSSL 0.9.6e 在检测缓冲区溢出攻击时会使用断言而不是严重程度较低的机制，这允许远程攻击者通过某些消息致使 OpenSSL 因失败的断言而中止，进而造成拒绝服务（崩溃），这一点已通过 SSLv2 CLIENT_MASTER_KEY 消息证实，且该问题在 s2_srvr.c 中未得到正确处理。(CVE-2002-1568)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

リモートホストにインストールされている OpenSSL は、0.9.6f より前のバージョンです。したがって、0.9.6f のアドバイザリに記載されている脆弱性の影響を受けます。

  - OpenSSL 0.9.6e は、バッファオーバーフロー攻撃を検出する際に、重要度の低いメカニズムではなくアサーションを使用します。これにより、リモートの攻撃者が、SSLv2 CLIENT_MASTER_KEY メッセージの使用で実証されているように、OpenSSL をアサーションの失敗から中止させる特定のメッセージを介して、サービス拒否 (クラッシュ) を引き起こす可能性があります。これは、s2_srvr.c で適切に処理されません。(CVE-2002-1568)

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

遠端主機上安裝的 OpenSSL 為 0.9.6f 之前版本。因此，它會受到 0.9.6f 公告中提及的一個弱點影響。

  - OpenSSL 0.9.6e 在偵測緩衝區溢位攻擊時使用宣告，而非較不嚴重的機制，這允許遠端攻擊者透過特定訊息造成 OpenSSL 從失敗的宣告中止，進而導致拒絕服務 (當機)；使用 SSLv2 CLIENT_MASTER_KEY 訊息即為一例，訊息未在 s2_srvr.c 中得到正確處理。(CVE-2002-1568)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
12315	RHEL 2.1 : openssl (RHSA-2002:157)	Nessus	Red Hat Local Security Checks	2004/7/6	2021/1/14	high
17747	OpenSSL 0.9.6e < 0.9.6f Vulnerability	Nessus	Web Servers	2012/1/4	2024/10/23	high
17747	OpenSSL 0.9.6e < 0.9.6f 漏洞	Nessus	Web Servers	2012/1/4	2024/10/23	high
17747	OpenSSL 0.9.6e < 0.9.6f の脆弱性	Nessus	Web Servers	2012/1/4	2024/10/23	high
17747	OpenSSL 0.9.6e < 0.9.6f 弱點	Nessus	Web Servers	2012/1/4	2024/10/23	high

检测

插件搜索

high

high

high

high

high