Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

CVE-2007-4995 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2007-4995

CVE-2007-4995

UNKNOWN

Off-by-one error in the DTLS implementation in OpenSSL 0

Published Oct 13, 2007

Modified 1 years ago

Details

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.

References(32)

WEB

http://bugs.gentoo.org/show_bug.cgi?id=195634

ADVISORY

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html

ADVISORY

http://secunia.com/advisories/25878

ADVISORY

http://secunia.com/advisories/27205

ADVISORY

http://secunia.com/advisories/27217

ADVISORY

http://secunia.com/advisories/27271

ADVISORY

http://secunia.com/advisories/27363

ADVISORY

http://secunia.com/advisories/27434

ADVISORY

http://secunia.com/advisories/27933

ADVISORY

http://secunia.com/advisories/28084

ADVISORY

http://secunia.com/advisories/30161

ADVISORY

http://secunia.com/advisories/30220

ADVISORY

http://secunia.com/advisories/30852

ADVISORY

http://security.gentoo.org/glsa/glsa-200710-30.xml

WEB

http://securitytracker.com/id?1018810

WEB

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738962

ADVISORY

http://www.debian.org/security/2008/dsa-1571

ADVISORY

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

ADVISORY

http://www.mandriva.com/security/advisories?name=MDKSA-2007:237

WEB

http://www.openssl.org/news/secadv_20071012.txt

ADVISORY

http://www.redhat.com/support/errata/RHSA-2007-0964.html

WEB

http://www.securityfocus.com/archive/1/482167/100/0/threaded

WEB

http://www.securityfocus.com/bid/26055

WEB

http://www.vupen.com/english/advisories/2007/3487

CVSS Analysis

CVSS v2.0

9.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedOct 13, 2007

ModifiedAug 7, 2024