Multiple vulnerabilities has been discovered and corrected in openssl :

The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine private keys via a timing attack and a lattice calculation (CVE-2011-1945).

crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past (CVE-2011-3207).

The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8s and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages, which allows remote attackers to cause a denial of service (application crash) via out-of-order messages that violate the TLS protocol (CVE-2011-3210).

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149 products_id=490

The updated packages have been patched to correct these issues.

It was discovered that the elliptic curve cryptography (ECC) subsystem in OpenSSL, when using the Elliptic Curve Digital Signature Algorithm (ECDSA) for the ECDHE_ECDSA cipher suite, did not properly implement curves over binary fields. This could allow an attacker to determine private keys via a timing attack. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04. (CVE-2011-1945)

Adam Langley discovered that the ephemeral Elliptic Curve Diffie-Hellman (ECDH) functionality in OpenSSL did not ensure thread safety while processing handshake messages from clients. This could allow a remote attacker to cause a denial of service via out-of-order messages that violate the TLS protocol. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04.
(CVE-2011-3210)

Nadhem Alfardan and Kenny Paterson discovered that the Datagram Transport Layer Security (DTLS) implementation in OpenSSL performed a MAC check only if certain padding is valid. This could allow a remote attacker to recover plaintext. (CVE-2011-4108)

Antonio Martin discovered that a flaw existed in the fix to address CVE-2011-4108, the DTLS MAC check failure. This could allow a remote attacker to cause a denial of service. (CVE-2012-0050)

Ben Laurie discovered a double free vulnerability in OpenSSL that could be triggered when the X509_V_FLAG_POLICY_CHECK flag is enabled.
This could allow a remote attacker to cause a denial of service. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04. (CVE-2011-4109)

It was discovered that OpenSSL, in certain circumstances involving ECDH or ECDHE cipher suites, used an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curves. This could allow a remote attacker to obtain the private key of a TLS server via multiple handshake attempts. This issue only affected Ubuntu 8.04 LTS. (CVE-2011-4354)

Adam Langley discovered that the SSL 3.0 implementation in OpenSSL did not properly initialize data structures for block cipher padding. This could allow a remote attacker to obtain sensitive information.
(CVE-2011-4576)

Andrew Chi discovered that OpenSSL, when RFC 3779 support is enabled, could trigger an assert when handling an X.509 certificate containing certificate-extension data associated with IP address blocks or Autonomous System (AS) identifiers. This could allow a remote attacker to cause a denial of service. (CVE-2011-4577)

Adam Langley discovered that the Server Gated Cryptography (SGC) implementation in OpenSSL did not properly handle handshake restarts.
This could allow a remote attacker to cause a denial of service.
(CVE-2011-4619)

Andrey Kulikov discovered that the GOST block cipher engine in OpenSSL did not properly handle invalid parameters. This could allow a remote attacker to cause a denial of service via crafted data from a TLS client. This issue only affected Ubuntu 11.10. (CVE-2012-0027).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The DTLS implementation in OpenSSL before 1.1.0 does     not properly restrict the lifetime of queue entries     associated with unused out-of-order messages, which     allows remote attackers to cause a denial of service     (memory consumption) by maintaining many crafted DTLS     sessions simultaneously, related to d1_lib.c,     statem_dtls.c, statem_lib.c, and     statem_srvr.c.(CVE-2016-2179)

  - OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC     3779 support is enabled, allows remote attackers to     cause a denial of service (assertion failure) via an     X.509 certificate containing certificate-extension data     associated with (1) IP address blocks or (2) Autonomous     System (AS) identifiers.(CVE-2011-4577)

  - Memory leak in the dtls1_buffer_record function in     d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1     before 1.0.1k allows remote attackers to cause a denial     of service (memory consumption) by sending many     duplicate records for the next epoch, leading to     failure of replay detection.(CVE-2015-0206)

  - The ephemeral ECDH ciphersuite functionality in OpenSSL     0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not     ensure thread safety during processing of handshake     messages from clients, which allows remote attackers to     cause a denial of service (daemon crash) via     out-of-order messages that violate the TLS     protocol.(CVE-2011-3210)

  - The X509_NAME_oneline function in     crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and     1.0.2 before 1.0.2h allows remote attackers to obtain     sensitive information from process stack memory or     cause a denial of service (buffer over-read) via     crafted EBCDIC ASN.1 data.(CVE-2016-2176)

  - The ssl3_get_cert_verify function in s3_srvr.c in     OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k     accepts client authentication with a Diffie-Hellman     (DH) certificate without requiring a CertificateVerify     message, which allows remote attackers to obtain access     without knowledge of a private key via crafted TLS     Handshake Protocol traffic to a server that recognizes     a Certification Authority with DH     support.(CVE-2015-0205)

  - The ssl3_get_key_exchange function in s3_clnt.c in     OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1     before 1.0.1k allows remote SSL servers to conduct     ECDHE-to-ECDH downgrade attacks and trigger a loss of     forward secrecy by omitting the ServerKeyExchange     message.(CVE-2014-3572)

  - Memory leak in d1_both.c in the DTLS implementation in     OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and     1.0.1 before 1.0.1i allows remote attackers to cause a     denial of service (memory consumption) via zero-length     DTLS fragments that trigger improper handling of the     return value of a certain insert     function.(CVE-2014-3507)

  - The ssl23_get_client_hello function in s23_srvr.c in     OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle     attackers to force the use of TLS 1.0 by triggering     ClientHello message fragmentation in communication     between a client and server that both support later TLS     versions, related to a 'protocol downgrade'     issue.(CVE-2014-3511)

  - The ssl3_send_client_key_exchange function in s3_clnt.c     in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and     1.0.1 before 1.0.1h, when an anonymous ECDH cipher     suite is used, allows remote attackers to cause a     denial of service (NULL pointer dereference and client     crash) by triggering a NULL certificate     value.(CVE-2014-3470)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.4. The newer version contains multiple security-related fixes for the following components :

  - CFNetwork
  - CoreAnimation
  - CoreMedia Playback
  - CUPS
  - Disk Management
  - OpenSSL
  - QuickDraw Manager
  - QuickTime
  - SMB

OpenSSL's internal certificate verification routines could incorrectly accept a CRL whose nextUpdate field is in the past (CVE-2011-3207).

Server code for ECDH could crash if it received a specially crafted handshake message (CVE-2011-3210).

The version of OpenSSL installed on the remote host is prior to 1.0.0e. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.0e advisory.

  - The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1     before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve     is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service     (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against     a server that supports client authentication. (CVE-2015-1788)

  - The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does     not ensure thread safety during processing of handshake messages from clients, which allows remote     attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS     protocol. (CVE-2011-3210)

  - crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which     makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to     a time in the past. (CVE-2011-3207)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2013-002 applied.  This update contains numerous security-related fixes for the following components :

  - CoreMedia Playback (10.7 only)
  - Directory Service (10.6 only)
  - OpenSSL
  - QuickDraw Manager
  - QuickTime
  - Ruby (10.6 only)
  - SMB (10.7 only)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
56325	Mandriva Linux Security Advisory : openssl (MDVSA-2011:137)	Nessus	Mandriva Local Security Checks	2011/9/29	2021/1/6	medium
57887	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : openssl vulnerabilities (USN-1357-1)	Nessus	Ubuntu Local Security Checks	2012/2/10	2019/9/19	high
137479	EulerOS 2.0 SP2 : openssl098e (EulerOS-SA-2020-1637)	Nessus	Huawei Local Security Checks	2020/6/17	2024/3/6	high
66808	Mac OS X 10.8.x < 10.8.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2013/6/5	2024/5/28	high
75907	openSUSE Security Update : libopenssl-devel (openSUSE-SU-2011:1144-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
56162	OpenSSL 1.0.0 < 1.0.0e Multiple Vulnerabilities	Nessus	Web Servers	2011/9/12	2024/10/23	medium
66809	Mac OS X Multiple Vulnerabilities (Security Update 2013-002)	Nessus	MacOS X Local Security Checks	2013/6/5	2024/5/28	critical

检测

插件搜索

medium

high

high

high

medium

medium

critical