Upstream information
Description
Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Novell Bugzilla entries: 202366, 207635, 215623 SUSE Security Advisories:- SUSE-SA:2006:058, published Thu, 28 Sep 2006 18:00:00 +0000
- SUSE-SR:2006:024, published Fri, 06 Oct 2006 14:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE LINUX 10.0 |
| |
| SUSE LINUX 9.2 |
| |
| SUSE LINUX 9.3 |
| |
| SuSE Linux Desktop 1.0 |
| sles9-oes.x86 ul1.s390 sles10.s390x slox4.x86 core9.s390 sled10.x86 YOU Patch Nr: 11234 ZYPP Patch Nr: 2141 |
| SuSE Linux Enterprise Server 8 for IBM zSeries |
| sles9-oes.x86 ul1.s390 sles10.s390x slox4.x86 core9.s390 sled10.x86 YOU Patch Nr: 11234 ZYPP Patch Nr: 2141 |
| Novell Linux Desktop 9 for x86_64 |
| sles9-oes.x86 ul1.s390 sles10.s390x slox4.x86 core9.s390 sled10.x86 YOU Patch Nr: 11234 ZYPP Patch Nr: 2141 |
| Novell Linux Desktop 9 for x86 Open Enterprise Server |
| sles9-oes.x86 ul1.s390 sles10.s390x slox4.x86 core9.s390 sled10.x86 YOU Patch Nr: 11234 ZYPP Patch Nr: 2141 |
| SUSE LINUX Retail Solution 8 SuSE Linux Enterprise Server 8 for AMD64 SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries SuSE Linux Enterprise Server 8 for IPF SuSE Linux Openexchange Server 4 SuSE Linux School Server for i386 SuSE Linux Standard Server 8 UnitedLinux 1.0 |
| sles9-oes.x86 ul1.s390 sles10.s390x slox4.x86 core9.s390 sled10.x86 YOU Patch Nr: 11234 ZYPP Patch Nr: 2141 |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12759 |
| SUSE LINUX 10.1 |
| |
| SuSE Linux Enterprise Server 8 for IBM zSeries |
| ul1.s390 YOU Patch Nr: 11271 |
| SUSE LINUX 10.0 |
| |
| SUSE LINUX 10.1 |
| |
| SUSE LINUX 9.2 |
| |
| SUSE LINUX 9.3 |
|