Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-4995

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.

Published

2007-10-13T01:17:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-189

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	openssl	openssl	0.9.8	Yes
Application	openssl	openssl	0.9.8a	Yes
Application	openssl	openssl	0.9.8b	Yes
Application	openssl	openssl	0.9.8c	Yes
Application	openssl	openssl	0.9.8d	Yes
Application	openssl	openssl	0.9.8e	Yes

References

http://bugs.gentoo.org/show_bug.cgi?id=195634 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773 ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773 ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html ([email protected])
http://secunia.com/advisories/25878 Vendor Advisory ([email protected])
http://secunia.com/advisories/27205 Vendor Advisory ([email protected])
http://secunia.com/advisories/27217 Vendor Advisory ([email protected])
http://secunia.com/advisories/27271 Vendor Advisory ([email protected])
http://secunia.com/advisories/27363 Vendor Advisory ([email protected])
http://secunia.com/advisories/27434 Vendor Advisory ([email protected])
http://secunia.com/advisories/27933 Vendor Advisory ([email protected])
http://secunia.com/advisories/28084 Vendor Advisory ([email protected])
http://secunia.com/advisories/30161 Vendor Advisory ([email protected])
http://secunia.com/advisories/30220 Vendor Advisory ([email protected])
http://secunia.com/advisories/30852 Vendor Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-200710-30.xml ([email protected])
http://securitytracker.com/id?1018810 ([email protected])
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738962 ([email protected])
http://www.debian.org/security/2008/dsa-1571 ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2007:237 ([email protected])
http://www.openssl.org/news/secadv_20071012.txt Patch ([email protected])
http://www.redhat.com/support/errata/RHSA-2007-0964.html Vendor Advisory ([email protected])
http://www.securityfocus.com/archive/1/482167/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/26055 ([email protected])
http://www.vupen.com/english/advisories/2007/3487 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2007/4219 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/1937/references Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/37185 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10288 ([email protected])
https://usn.ubuntu.com/534-1/ ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html ([email protected])
http://bugs.gentoo.org/show_bug.cgi?id=195634 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773 (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773 (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/25878 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/27205 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/27217 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/27271 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/27363 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/27434 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/27933 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/28084 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30161 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30220 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30852 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200710-30.xml (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1018810 (af854a3a-2127-422b-91ae-364da2661108)
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738962 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2008/dsa-1571 (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2007:237 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openssl.org/news/secadv_20071012.txt Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2007-0964.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/482167/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/26055 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/3487 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/4219 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1937/references Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/37185 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10288 (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/534-1/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html (af854a3a-2127-422b-91ae-364da2661108)