Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-2937

OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.

Published

2006-09-28T18:07:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

6.9

Weaknesses

Type: Primary
CWE-399

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	openssl	openssl	0.9.7	Yes
Application	openssl	openssl	0.9.7a	Yes
Application	openssl	openssl	0.9.7b	Yes
Application	openssl	openssl	0.9.7c	Yes
Application	openssl	openssl	0.9.7d	Yes
Application	openssl	openssl	0.9.7e	Yes
Application	openssl	openssl	0.9.7f	Yes
Application	openssl	openssl	0.9.7g	Yes
Application	openssl	openssl	0.9.7h	Yes
Application	openssl	openssl	0.9.7i	Yes
Application	openssl	openssl	0.9.7j	Yes
Application	openssl	openssl	0.9.7k	Yes
Application	openssl	openssl	0.9.8	Yes
Application	openssl	openssl	0.9.8a	Yes
Application	openssl	openssl	0.9.8b	Yes
Application	openssl	openssl	0.9.8c	Yes

References

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc ([email protected])
http://docs.info.apple.com/article.html?artnum=304829 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 ([email protected])
http://issues.rpath.com/browse/RPL-613 ([email protected])
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 ([email protected])
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 ([email protected])
http://kolab.org/security/kolab-vendor-notice-11.txt Patch ([email protected])
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html ([email protected])
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html Patch ([email protected])
http://lists.vmware.com/pipermail/security-announce/2008/000008.html ([email protected])
http://marc.info/?l=bind-announce&m=116253119512445&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=130497311408250&w=2 ([email protected])
http://openbsd.org/errata.html#openssl2 Patch ([email protected])
http://openvpn.net/changelog.html Patch ([email protected])
http://secunia.com/advisories/22094 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22116 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22130 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22165 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22166 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22172 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22186 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22193 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22207 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22212 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22216 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22220 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22240 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22259 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22260 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22284 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22298 ([email protected])
http://secunia.com/advisories/22330 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22385 Vendor Advisory ([email protected])
http://secunia.com/advisories/22460 Vendor Advisory ([email protected])
http://secunia.com/advisories/22487 Vendor Advisory ([email protected])
http://secunia.com/advisories/22544 Vendor Advisory ([email protected])
http://secunia.com/advisories/22626 Vendor Advisory ([email protected])
http://secunia.com/advisories/22671 Vendor Advisory ([email protected])
http://secunia.com/advisories/22758 ([email protected])
http://secunia.com/advisories/22772 ([email protected])
http://secunia.com/advisories/22799 ([email protected])
http://secunia.com/advisories/23038 ([email protected])
http://secunia.com/advisories/23131 ([email protected])
http://secunia.com/advisories/23155 ([email protected])
http://secunia.com/advisories/23280 ([email protected])
http://secunia.com/advisories/23309 ([email protected])
http://secunia.com/advisories/23340 ([email protected])
http://secunia.com/advisories/23351 ([email protected])
http://secunia.com/advisories/23680 ([email protected])
http://secunia.com/advisories/23915 ([email protected])
http://secunia.com/advisories/24930 ([email protected])
http://secunia.com/advisories/24950 ([email protected])
http://secunia.com/advisories/25889 ([email protected])
http://secunia.com/advisories/26329 ([email protected])
http://secunia.com/advisories/30124 ([email protected])
http://secunia.com/advisories/31492 ([email protected])
http://secunia.com/advisories/31531 ([email protected])
http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc Patch, Vendor Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-200610-11.xml ([email protected])
http://securitytracker.com/id?1016943 Patch ([email protected])
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 Patch ([email protected])
http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 Patch ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1 ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 ([email protected])
http://support.attachmate.com/techdocs/2374.html ([email protected])
http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm Patch ([email protected])
http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm ([email protected])
http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf Patch, Vendor Advisory ([email protected])
http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf ([email protected])
http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html ([email protected])
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml ([email protected])
http://www.debian.org/security/2006/dsa-1185 Patch ([email protected])
http://www.f-secure.com/security/fsc-2006-6.shtml ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml ([email protected])
http://www.kb.cert.org/vuls/id/247744 Patch, US Government Resource ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 ([email protected])
http://www.novell.com/linux/security/advisories/2006_24_sr.html Patch, Vendor Advisory ([email protected])
http://www.novell.com/linux/security/advisories/2006_58_openssl.html Patch, Vendor Advisory ([email protected])
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html Patch, Vendor Advisory ([email protected])
http://www.openssl.org/news/secadv_20060928.txt Patch, Vendor Advisory ([email protected])
http://www.osvdb.org/29260 ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0695.html Patch ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0629.html ([email protected])
http://www.securityfocus.com/archive/1/447318/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/447393/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/456546/100/200/threaded ([email protected])
http://www.securityfocus.com/archive/1/489739/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/20248 Patch ([email protected])
http://www.securityfocus.com/bid/28276 ([email protected])
http://www.serv-u.com/releasenotes/ Patch ([email protected])
http://www.trustix.org/errata/2006/0054 Patch ([email protected])
http://www.ubuntu.com/usn/usn-353-1 Patch, Vendor Advisory ([email protected])
http://www.us-cert.gov/cas/techalerts/TA06-333A.html US Government Resource ([email protected])
http://www.vmware.com/security/advisories/VMSA-2008-0005.html ([email protected])
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html ([email protected])
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html ([email protected])
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html ([email protected])
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html ([email protected])
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html ([email protected])
http://www.vmware.com/support/player/doc/releasenotes_player.html ([email protected])
http://www.vmware.com/support/player2/doc/releasenotes_player2.html ([email protected])
http://www.vmware.com/support/server/doc/releasenotes_server.html ([email protected])
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html ([email protected])
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html ([email protected])
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html ([email protected])
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html ([email protected])
http://www.vupen.com/english/advisories/2006/3820 ([email protected])
http://www.vupen.com/english/advisories/2006/3860 ([email protected])
http://www.vupen.com/english/advisories/2006/3869 ([email protected])
http://www.vupen.com/english/advisories/2006/3902 ([email protected])
http://www.vupen.com/english/advisories/2006/3936 ([email protected])
http://www.vupen.com/english/advisories/2006/4019 ([email protected])
http://www.vupen.com/english/advisories/2006/4036 ([email protected])
http://www.vupen.com/english/advisories/2006/4264 ([email protected])
http://www.vupen.com/english/advisories/2006/4327 ([email protected])
http://www.vupen.com/english/advisories/2006/4329 ([email protected])
http://www.vupen.com/english/advisories/2006/4401 ([email protected])
http://www.vupen.com/english/advisories/2006/4417 ([email protected])
http://www.vupen.com/english/advisories/2006/4750 ([email protected])
http://www.vupen.com/english/advisories/2006/4761 ([email protected])
http://www.vupen.com/english/advisories/2006/4980 ([email protected])
http://www.vupen.com/english/advisories/2007/0343 ([email protected])
http://www.vupen.com/english/advisories/2007/1401 ([email protected])
http://www.vupen.com/english/advisories/2007/2315 ([email protected])
http://www.vupen.com/english/advisories/2007/2783 ([email protected])
http://www.vupen.com/english/advisories/2008/0905/references ([email protected])
http://www.vupen.com/english/advisories/2008/2396 ([email protected])
http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/29228 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560 ([email protected])
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 ([email protected])
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc (af854a3a-2127-422b-91ae-364da2661108)
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc (af854a3a-2127-422b-91ae-364da2661108)
http://docs.info.apple.com/article.html?artnum=304829 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 (af854a3a-2127-422b-91ae-364da2661108)
http://issues.rpath.com/browse/RPL-613 (af854a3a-2127-422b-91ae-364da2661108)
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 (af854a3a-2127-422b-91ae-364da2661108)
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 (af854a3a-2127-422b-91ae-364da2661108)
http://kolab.org/security/kolab-vendor-notice-11.txt Patch (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html Patch (af854a3a-2127-422b-91ae-364da2661108)
http://lists.vmware.com/pipermail/security-announce/2008/000008.html (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bind-announce&m=116253119512445&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=130497311408250&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://openbsd.org/errata.html#openssl2 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://openvpn.net/changelog.html Patch (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22094 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22116 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22130 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22165 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22166 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22172 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22186 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22193 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22207 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22212 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22216 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22220 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22240 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22259 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22260 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22284 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22298 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22330 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22385 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22460 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22487 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22544 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22626 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22671 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22758 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22772 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22799 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23038 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23131 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23155 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23280 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23309 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23340 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23351 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23680 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23915 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24930 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24950 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/25889 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/26329 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30124 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31492 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31531 (af854a3a-2127-422b-91ae-364da2661108)
http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200610-11.xml (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016943 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1 (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 (af854a3a-2127-422b-91ae-364da2661108)
http://support.attachmate.com/techdocs/2374.html (af854a3a-2127-422b-91ae-364da2661108)
http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm Patch (af854a3a-2127-422b-91ae-364da2661108)
http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm (af854a3a-2127-422b-91ae-364da2661108)
http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1185 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.f-secure.com/security/fsc-2006-6.shtml (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/247744 Patch, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_24_sr.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_58_openssl.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openssl.org/news/secadv_20060928.txt Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/29260 (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0695.html Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0629.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/447318/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/447393/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/456546/100/200/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/489739/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/20248 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/28276 (af854a3a-2127-422b-91ae-364da2661108)
http://www.serv-u.com/releasenotes/ Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.trustix.org/errata/2006/0054 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-353-1 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA06-333A.html US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2008-0005.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/player/doc/releasenotes_player.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/player2/doc/releasenotes_player2.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/server/doc/releasenotes_server.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3820 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3860 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3869 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3902 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3936 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4019 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4036 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4264 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4327 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4329 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4401 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4417 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4750 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4761 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/4980 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0343 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/1401 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/2315 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/2783 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0905/references (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/2396 (af854a3a-2127-422b-91ae-364da2661108)
http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/29228 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560 (af854a3a-2127-422b-91ae-364da2661108)
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 (af854a3a-2127-422b-91ae-364da2661108)