CVE-2006-2940

OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification.
References
Link Resource
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
http://docs.info.apple.com/article.html?artnum=304829
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
http://issues.rpath.com/browse/RPL-613
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
http://kolab.org/security/kolab-vendor-notice-11.txt
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html
http://lists.vmware.com/pipermail/security-announce/2008/000008.html
http://marc.info/?l=bind-announce&m=116253119512445&w=2
http://marc.info/?l=bugtraq&m=130497311408250&w=2
http://marc.info/?l=bugtraq&m=130497311408250&w=2
http://openbsd.org/errata.html#openssl2
http://openvpn.net/changelog.html
http://secunia.com/advisories/22094 Vendor Advisory
http://secunia.com/advisories/22116 Vendor Advisory
http://secunia.com/advisories/22130 Vendor Advisory
http://secunia.com/advisories/22165 Vendor Advisory
http://secunia.com/advisories/22166 Vendor Advisory
http://secunia.com/advisories/22172 Vendor Advisory
http://secunia.com/advisories/22186 Vendor Advisory
http://secunia.com/advisories/22193 Vendor Advisory
http://secunia.com/advisories/22207 Vendor Advisory
http://secunia.com/advisories/22212 Vendor Advisory
http://secunia.com/advisories/22216 Vendor Advisory
http://secunia.com/advisories/22220 Vendor Advisory
http://secunia.com/advisories/22240 Vendor Advisory
http://secunia.com/advisories/22259 Vendor Advisory
http://secunia.com/advisories/22260 Vendor Advisory
http://secunia.com/advisories/22284 Vendor Advisory
http://secunia.com/advisories/22298
http://secunia.com/advisories/22330 Vendor Advisory
http://secunia.com/advisories/22385 Vendor Advisory
http://secunia.com/advisories/22460 Vendor Advisory
http://secunia.com/advisories/22487
http://secunia.com/advisories/22500 Vendor Advisory
http://secunia.com/advisories/22544 Vendor Advisory
http://secunia.com/advisories/22626
http://secunia.com/advisories/22671
http://secunia.com/advisories/22758
http://secunia.com/advisories/22772
http://secunia.com/advisories/22799
http://secunia.com/advisories/23038
http://secunia.com/advisories/23155
http://secunia.com/advisories/23280
http://secunia.com/advisories/23309
http://secunia.com/advisories/23340
http://secunia.com/advisories/23351
http://secunia.com/advisories/23680
http://secunia.com/advisories/23794
http://secunia.com/advisories/23915
http://secunia.com/advisories/24930
http://secunia.com/advisories/24950
http://secunia.com/advisories/25889
http://secunia.com/advisories/26329
http://secunia.com/advisories/26893
http://secunia.com/advisories/30124
http://secunia.com/advisories/31492
http://secunia.com/advisories/31531
http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc
http://security.gentoo.org/glsa/glsa-200610-11.xml
http://securitytracker.com/id?1016943
http://securitytracker.com/id?1017522
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946
http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1
http://support.attachmate.com/techdocs/2374.html
http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm
http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf
http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf
http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml
http://www.debian.org/security/2006/dsa-1185
http://www.debian.org/security/2006/dsa-1195
http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:172
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178
http://www.novell.com/linux/security/advisories/2006_24_sr.html
http://www.novell.com/linux/security/advisories/2006_58_openssl.html
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html
http://www.openssl.org/news/secadv_20060928.txt
http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
http://www.osvdb.org/29261
http://www.redhat.com/support/errata/RHSA-2006-0695.html Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0629.html
http://www.securityfocus.com/archive/1/447318/100/0/threaded
http://www.securityfocus.com/archive/1/447393/100/0/threaded
http://www.securityfocus.com/archive/1/456546/100/200/threaded
http://www.securityfocus.com/archive/1/489739/100/0/threaded
http://www.securityfocus.com/bid/20247
http://www.securityfocus.com/bid/22083
http://www.securityfocus.com/bid/28276
http://www.serv-u.com/releasenotes/
http://www.trustix.org/errata/2006/0054
http://www.ubuntu.com/usn/usn-353-1
http://www.ubuntu.com/usn/usn-353-2
http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en
http://www.us-cert.gov/cas/techalerts/TA06-333A.html US Government Resource
http://www.vmware.com/security/advisories/VMSA-2008-0005.html
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html
http://www.vmware.com/support/player/doc/releasenotes_player.html
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
http://www.vmware.com/support/server/doc/releasenotes_server.html
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
http://www.vupen.com/english/advisories/2006/3820
http://www.vupen.com/english/advisories/2006/3860
http://www.vupen.com/english/advisories/2006/3869
http://www.vupen.com/english/advisories/2006/3902
http://www.vupen.com/english/advisories/2006/3936
http://www.vupen.com/english/advisories/2006/4019
http://www.vupen.com/english/advisories/2006/4036
http://www.vupen.com/english/advisories/2006/4264
http://www.vupen.com/english/advisories/2006/4327
http://www.vupen.com/english/advisories/2006/4329
http://www.vupen.com/english/advisories/2006/4401
http://www.vupen.com/english/advisories/2006/4417
http://www.vupen.com/english/advisories/2006/4750
http://www.vupen.com/english/advisories/2006/4980
http://www.vupen.com/english/advisories/2007/0343
http://www.vupen.com/english/advisories/2007/1401
http://www.vupen.com/english/advisories/2007/2315
http://www.vupen.com/english/advisories/2007/2783
http://www.vupen.com/english/advisories/2008/0905/references
http://www.vupen.com/english/advisories/2008/2396
http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29230
https://issues.rpath.com/browse/RPL-1633
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10311
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
http://docs.info.apple.com/article.html?artnum=304829
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
http://issues.rpath.com/browse/RPL-613
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
http://kolab.org/security/kolab-vendor-notice-11.txt
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html
http://lists.vmware.com/pipermail/security-announce/2008/000008.html
http://marc.info/?l=bind-announce&m=116253119512445&w=2
http://marc.info/?l=bugtraq&m=130497311408250&w=2
http://marc.info/?l=bugtraq&m=130497311408250&w=2
http://openbsd.org/errata.html#openssl2
http://openvpn.net/changelog.html
http://secunia.com/advisories/22094 Vendor Advisory
http://secunia.com/advisories/22116 Vendor Advisory
http://secunia.com/advisories/22130 Vendor Advisory
http://secunia.com/advisories/22165 Vendor Advisory
http://secunia.com/advisories/22166 Vendor Advisory
http://secunia.com/advisories/22172 Vendor Advisory
http://secunia.com/advisories/22186 Vendor Advisory
http://secunia.com/advisories/22193 Vendor Advisory
http://secunia.com/advisories/22207 Vendor Advisory
http://secunia.com/advisories/22212 Vendor Advisory
http://secunia.com/advisories/22216 Vendor Advisory
http://secunia.com/advisories/22220 Vendor Advisory
http://secunia.com/advisories/22240 Vendor Advisory
http://secunia.com/advisories/22259 Vendor Advisory
http://secunia.com/advisories/22260 Vendor Advisory
http://secunia.com/advisories/22284 Vendor Advisory
http://secunia.com/advisories/22298
http://secunia.com/advisories/22330 Vendor Advisory
http://secunia.com/advisories/22385 Vendor Advisory
http://secunia.com/advisories/22460 Vendor Advisory
http://secunia.com/advisories/22487
http://secunia.com/advisories/22500 Vendor Advisory
http://secunia.com/advisories/22544 Vendor Advisory
http://secunia.com/advisories/22626
http://secunia.com/advisories/22671
http://secunia.com/advisories/22758
http://secunia.com/advisories/22772
http://secunia.com/advisories/22799
http://secunia.com/advisories/23038
http://secunia.com/advisories/23155
http://secunia.com/advisories/23280
http://secunia.com/advisories/23309
http://secunia.com/advisories/23340
http://secunia.com/advisories/23351
http://secunia.com/advisories/23680
http://secunia.com/advisories/23794
http://secunia.com/advisories/23915
http://secunia.com/advisories/24930
http://secunia.com/advisories/24950
http://secunia.com/advisories/25889
http://secunia.com/advisories/26329
http://secunia.com/advisories/26893
http://secunia.com/advisories/30124
http://secunia.com/advisories/31492
http://secunia.com/advisories/31531
http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc
http://security.gentoo.org/glsa/glsa-200610-11.xml
http://securitytracker.com/id?1016943
http://securitytracker.com/id?1017522
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946
http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1
http://support.attachmate.com/techdocs/2374.html
http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm
http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf
http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf
http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml
http://www.debian.org/security/2006/dsa-1185
http://www.debian.org/security/2006/dsa-1195
http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:172
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178
http://www.novell.com/linux/security/advisories/2006_24_sr.html
http://www.novell.com/linux/security/advisories/2006_58_openssl.html
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html
http://www.openssl.org/news/secadv_20060928.txt
http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
http://www.osvdb.org/29261
http://www.redhat.com/support/errata/RHSA-2006-0695.html Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0629.html
http://www.securityfocus.com/archive/1/447318/100/0/threaded
http://www.securityfocus.com/archive/1/447393/100/0/threaded
http://www.securityfocus.com/archive/1/456546/100/200/threaded
http://www.securityfocus.com/archive/1/489739/100/0/threaded
http://www.securityfocus.com/bid/20247
http://www.securityfocus.com/bid/22083
http://www.securityfocus.com/bid/28276
http://www.serv-u.com/releasenotes/
http://www.trustix.org/errata/2006/0054
http://www.ubuntu.com/usn/usn-353-1
http://www.ubuntu.com/usn/usn-353-2
http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en
http://www.us-cert.gov/cas/techalerts/TA06-333A.html US Government Resource
http://www.vmware.com/security/advisories/VMSA-2008-0005.html
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html
http://www.vmware.com/support/player/doc/releasenotes_player.html
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
http://www.vmware.com/support/server/doc/releasenotes_server.html
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
http://www.vupen.com/english/advisories/2006/3820
http://www.vupen.com/english/advisories/2006/3860
http://www.vupen.com/english/advisories/2006/3869
http://www.vupen.com/english/advisories/2006/3902
http://www.vupen.com/english/advisories/2006/3936
http://www.vupen.com/english/advisories/2006/4019
http://www.vupen.com/english/advisories/2006/4036
http://www.vupen.com/english/advisories/2006/4264
http://www.vupen.com/english/advisories/2006/4327
http://www.vupen.com/english/advisories/2006/4329
http://www.vupen.com/english/advisories/2006/4401
http://www.vupen.com/english/advisories/2006/4417
http://www.vupen.com/english/advisories/2006/4750
http://www.vupen.com/english/advisories/2006/4980
http://www.vupen.com/english/advisories/2007/0343
http://www.vupen.com/english/advisories/2007/1401
http://www.vupen.com/english/advisories/2007/2315
http://www.vupen.com/english/advisories/2007/2783
http://www.vupen.com/english/advisories/2008/0905/references
http://www.vupen.com/english/advisories/2008/2396
http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29230
https://issues.rpath.com/browse/RPL-1633
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10311
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*

History

21 Nov 2024, 00:12

Type Values Removed Values Added
References () ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc - () ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc -
References () ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - () ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc -
References () http://docs.info.apple.com/article.html?artnum=304829 - () http://docs.info.apple.com/article.html?artnum=304829 -
References () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 - () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 -
References () http://issues.rpath.com/browse/RPL-613 - () http://issues.rpath.com/browse/RPL-613 -
References () http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 - () http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 -
References () http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 - () http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 -
References () http://kolab.org/security/kolab-vendor-notice-11.txt - () http://kolab.org/security/kolab-vendor-notice-11.txt -
References () http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - () http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html -
References () http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html - () http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html -
References () http://lists.vmware.com/pipermail/security-announce/2008/000008.html - () http://lists.vmware.com/pipermail/security-announce/2008/000008.html -
References () http://marc.info/?l=bind-announce&m=116253119512445&w=2 - () http://marc.info/?l=bind-announce&m=116253119512445&w=2 -
References () http://marc.info/?l=bugtraq&m=130497311408250&w=2 - () http://marc.info/?l=bugtraq&m=130497311408250&w=2 -
References () http://openbsd.org/errata.html#openssl2 - () http://openbsd.org/errata.html#openssl2 -
References () http://openvpn.net/changelog.html - () http://openvpn.net/changelog.html -
References () http://secunia.com/advisories/22094 - Vendor Advisory () http://secunia.com/advisories/22094 - Vendor Advisory
References () http://secunia.com/advisories/22116 - Vendor Advisory () http://secunia.com/advisories/22116 - Vendor Advisory
References () http://secunia.com/advisories/22130 - Vendor Advisory () http://secunia.com/advisories/22130 - Vendor Advisory
References () http://secunia.com/advisories/22165 - Vendor Advisory () http://secunia.com/advisories/22165 - Vendor Advisory
References () http://secunia.com/advisories/22166 - Vendor Advisory () http://secunia.com/advisories/22166 - Vendor Advisory
References () http://secunia.com/advisories/22172 - Vendor Advisory () http://secunia.com/advisories/22172 - Vendor Advisory
References () http://secunia.com/advisories/22186 - Vendor Advisory () http://secunia.com/advisories/22186 - Vendor Advisory
References () http://secunia.com/advisories/22193 - Vendor Advisory () http://secunia.com/advisories/22193 - Vendor Advisory
References () http://secunia.com/advisories/22207 - Vendor Advisory () http://secunia.com/advisories/22207 - Vendor Advisory
References () http://secunia.com/advisories/22212 - Vendor Advisory () http://secunia.com/advisories/22212 - Vendor Advisory
References () http://secunia.com/advisories/22216 - Vendor Advisory () http://secunia.com/advisories/22216 - Vendor Advisory
References () http://secunia.com/advisories/22220 - Vendor Advisory () http://secunia.com/advisories/22220 - Vendor Advisory
References () http://secunia.com/advisories/22240 - Vendor Advisory () http://secunia.com/advisories/22240 - Vendor Advisory
References () http://secunia.com/advisories/22259 - Vendor Advisory () http://secunia.com/advisories/22259 - Vendor Advisory
References () http://secunia.com/advisories/22260 - Vendor Advisory () http://secunia.com/advisories/22260 - Vendor Advisory
References () http://secunia.com/advisories/22284 - Vendor Advisory () http://secunia.com/advisories/22284 - Vendor Advisory
References () http://secunia.com/advisories/22298 - () http://secunia.com/advisories/22298 -
References () http://secunia.com/advisories/22330 - Vendor Advisory () http://secunia.com/advisories/22330 - Vendor Advisory
References () http://secunia.com/advisories/22385 - Vendor Advisory () http://secunia.com/advisories/22385 - Vendor Advisory
References () http://secunia.com/advisories/22460 - Vendor Advisory () http://secunia.com/advisories/22460 - Vendor Advisory
References () http://secunia.com/advisories/22487 - () http://secunia.com/advisories/22487 -
References () http://secunia.com/advisories/22500 - Vendor Advisory () http://secunia.com/advisories/22500 - Vendor Advisory
References () http://secunia.com/advisories/22544 - Vendor Advisory () http://secunia.com/advisories/22544 - Vendor Advisory
References () http://secunia.com/advisories/22626 - () http://secunia.com/advisories/22626 -
References () http://secunia.com/advisories/22671 - () http://secunia.com/advisories/22671 -
References () http://secunia.com/advisories/22758 - () http://secunia.com/advisories/22758 -
References () http://secunia.com/advisories/22772 - () http://secunia.com/advisories/22772 -
References () http://secunia.com/advisories/22799 - () http://secunia.com/advisories/22799 -
References () http://secunia.com/advisories/23038 - () http://secunia.com/advisories/23038 -
References () http://secunia.com/advisories/23155 - () http://secunia.com/advisories/23155 -
References () http://secunia.com/advisories/23280 - () http://secunia.com/advisories/23280 -
References () http://secunia.com/advisories/23309 - () http://secunia.com/advisories/23309 -
References () http://secunia.com/advisories/23340 - () http://secunia.com/advisories/23340 -
References () http://secunia.com/advisories/23351 - () http://secunia.com/advisories/23351 -
References () http://secunia.com/advisories/23680 - () http://secunia.com/advisories/23680 -
References () http://secunia.com/advisories/23794 - () http://secunia.com/advisories/23794 -
References () http://secunia.com/advisories/23915 - () http://secunia.com/advisories/23915 -
References () http://secunia.com/advisories/24930 - () http://secunia.com/advisories/24930 -
References () http://secunia.com/advisories/24950 - () http://secunia.com/advisories/24950 -
References () http://secunia.com/advisories/25889 - () http://secunia.com/advisories/25889 -
References () http://secunia.com/advisories/26329 - () http://secunia.com/advisories/26329 -
References () http://secunia.com/advisories/26893 - () http://secunia.com/advisories/26893 -
References () http://secunia.com/advisories/30124 - () http://secunia.com/advisories/30124 -
References () http://secunia.com/advisories/31492 - () http://secunia.com/advisories/31492 -
References () http://secunia.com/advisories/31531 - () http://secunia.com/advisories/31531 -
References () http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc - () http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc -
References () http://security.gentoo.org/glsa/glsa-200610-11.xml - () http://security.gentoo.org/glsa/glsa-200610-11.xml -
References () http://securitytracker.com/id?1016943 - () http://securitytracker.com/id?1016943 -
References () http://securitytracker.com/id?1017522 - () http://securitytracker.com/id?1017522 -
References () http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 - () http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 -
References () http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 - () http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 -
References () http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 - () http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 -
References () http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1 - () http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1 -
References () http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1 - () http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1 -
References () http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 - () http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1 -
References () http://support.attachmate.com/techdocs/2374.html - () http://support.attachmate.com/techdocs/2374.html -
References () http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm - () http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm -
References () http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm - () http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm -
References () http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf - () http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf -
References () http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf - () http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf -
References () http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html - () http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html -
References () http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - () http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml -
References () http://www.debian.org/security/2006/dsa-1185 - () http://www.debian.org/security/2006/dsa-1185 -
References () http://www.debian.org/security/2006/dsa-1195 - () http://www.debian.org/security/2006/dsa-1195 -
References () http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml - () http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml -
References () http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 - () http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 -
References () http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 - () http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 -
References () http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 - () http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 -
References () http://www.novell.com/linux/security/advisories/2006_24_sr.html - () http://www.novell.com/linux/security/advisories/2006_24_sr.html -
References () http://www.novell.com/linux/security/advisories/2006_58_openssl.html - () http://www.novell.com/linux/security/advisories/2006_58_openssl.html -
References () http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html - () http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html -
References () http://www.openssl.org/news/secadv_20060928.txt - () http://www.openssl.org/news/secadv_20060928.txt -
References () http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html - () http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html -
References () http://www.osvdb.org/29261 - () http://www.osvdb.org/29261 -
References () http://www.redhat.com/support/errata/RHSA-2006-0695.html - Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2006-0695.html - Vendor Advisory
References () http://www.redhat.com/support/errata/RHSA-2008-0629.html - () http://www.redhat.com/support/errata/RHSA-2008-0629.html -
References () http://www.securityfocus.com/archive/1/447318/100/0/threaded - () http://www.securityfocus.com/archive/1/447318/100/0/threaded -
References () http://www.securityfocus.com/archive/1/447393/100/0/threaded - () http://www.securityfocus.com/archive/1/447393/100/0/threaded -
References () http://www.securityfocus.com/archive/1/456546/100/200/threaded - () http://www.securityfocus.com/archive/1/456546/100/200/threaded -
References () http://www.securityfocus.com/archive/1/489739/100/0/threaded - () http://www.securityfocus.com/archive/1/489739/100/0/threaded -
References () http://www.securityfocus.com/bid/20247 - () http://www.securityfocus.com/bid/20247 -
References () http://www.securityfocus.com/bid/22083 - () http://www.securityfocus.com/bid/22083 -
References () http://www.securityfocus.com/bid/28276 - () http://www.securityfocus.com/bid/28276 -
References () http://www.serv-u.com/releasenotes/ - () http://www.serv-u.com/releasenotes/ -
References () http://www.trustix.org/errata/2006/0054 - () http://www.trustix.org/errata/2006/0054 -
References () http://www.ubuntu.com/usn/usn-353-1 - () http://www.ubuntu.com/usn/usn-353-1 -
References () http://www.ubuntu.com/usn/usn-353-2 - () http://www.ubuntu.com/usn/usn-353-2 -
References () http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en - () http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en -
References () http://www.us-cert.gov/cas/techalerts/TA06-333A.html - US Government Resource () http://www.us-cert.gov/cas/techalerts/TA06-333A.html - US Government Resource
References () http://www.vmware.com/security/advisories/VMSA-2008-0005.html - () http://www.vmware.com/security/advisories/VMSA-2008-0005.html -
References () http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - () http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html -
References () http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html - () http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html -
References () http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html - () http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html -
References () http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html - () http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html -
References () http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html - () http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html -
References () http://www.vmware.com/support/player/doc/releasenotes_player.html - () http://www.vmware.com/support/player/doc/releasenotes_player.html -
References () http://www.vmware.com/support/player2/doc/releasenotes_player2.html - () http://www.vmware.com/support/player2/doc/releasenotes_player2.html -
References () http://www.vmware.com/support/server/doc/releasenotes_server.html - () http://www.vmware.com/support/server/doc/releasenotes_server.html -
References () http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - () http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html -
References () http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html - () http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html -
References () http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - () http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html -
References () http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - () http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html -
References () http://www.vupen.com/english/advisories/2006/3820 - () http://www.vupen.com/english/advisories/2006/3820 -
References () http://www.vupen.com/english/advisories/2006/3860 - () http://www.vupen.com/english/advisories/2006/3860 -
References () http://www.vupen.com/english/advisories/2006/3869 - () http://www.vupen.com/english/advisories/2006/3869 -
References () http://www.vupen.com/english/advisories/2006/3902 - () http://www.vupen.com/english/advisories/2006/3902 -
References () http://www.vupen.com/english/advisories/2006/3936 - () http://www.vupen.com/english/advisories/2006/3936 -
References () http://www.vupen.com/english/advisories/2006/4019 - () http://www.vupen.com/english/advisories/2006/4019 -
References () http://www.vupen.com/english/advisories/2006/4036 - () http://www.vupen.com/english/advisories/2006/4036 -
References () http://www.vupen.com/english/advisories/2006/4264 - () http://www.vupen.com/english/advisories/2006/4264 -
References () http://www.vupen.com/english/advisories/2006/4327 - () http://www.vupen.com/english/advisories/2006/4327 -
References () http://www.vupen.com/english/advisories/2006/4329 - () http://www.vupen.com/english/advisories/2006/4329 -
References () http://www.vupen.com/english/advisories/2006/4401 - () http://www.vupen.com/english/advisories/2006/4401 -
References () http://www.vupen.com/english/advisories/2006/4417 - () http://www.vupen.com/english/advisories/2006/4417 -
References () http://www.vupen.com/english/advisories/2006/4750 - () http://www.vupen.com/english/advisories/2006/4750 -
References () http://www.vupen.com/english/advisories/2006/4980 - () http://www.vupen.com/english/advisories/2006/4980 -
References () http://www.vupen.com/english/advisories/2007/0343 - () http://www.vupen.com/english/advisories/2007/0343 -
References () http://www.vupen.com/english/advisories/2007/1401 - () http://www.vupen.com/english/advisories/2007/1401 -
References () http://www.vupen.com/english/advisories/2007/2315 - () http://www.vupen.com/english/advisories/2007/2315 -
References () http://www.vupen.com/english/advisories/2007/2783 - () http://www.vupen.com/english/advisories/2007/2783 -
References () http://www.vupen.com/english/advisories/2008/0905/references - () http://www.vupen.com/english/advisories/2008/0905/references -
References () http://www.vupen.com/english/advisories/2008/2396 - () http://www.vupen.com/english/advisories/2008/2396 -
References () http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf - () http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/29230 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/29230 -
References () https://issues.rpath.com/browse/RPL-1633 - () https://issues.rpath.com/browse/RPL-1633 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10311 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10311 -
References () https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - () https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 -

Information

Published : 2006-09-28 18:07

Updated : 2024-11-21 00:12


NVD link : CVE-2006-2940

Mitre link : CVE-2006-2940

CVE.ORG link : CVE-2006-2940


JSON object : View

Products Affected

openssl

  • openssl
CWE
CWE-399

Resource Management Errors