Re: OpenSSL heads-up

From: Dragos Ruiu (dr_at_kyx.net)
Date: 09/30/03

  • Next message: Jacques A. Vidrine: "Re: OpenSSL heads-up" 
    To: "Jacques A. Vidrine" <nectar@FreeBSD.org>, freebsd-security@FreeBSD.org
Date: Tue, 30 Sep 2003 14:43:37 -0700

    On September 30, 2003 01:31 pm, Jacques A. Vidrine wrote:
    > Don't panic. The vulnerability is denial-of-service.

    On September 30, 2003 07:52 am, Chris Wysopal wrote on Vulnwatch:
    > Three specific vulnerabilities have been discovered in the OpenSSL
    > libraries. Two of these could allow a Denial of Service attack, the third
    > may result in an attacker being able to execute malicious code under
    > certain conditions.

    Please clarify. Conflicting information.

    thanks,
    --dr 

    -- 
Top security experts.  Cutting edge tools, techniques and information.
Tokyo, Japan   November, 2003   http://www.pacsec.jp
pgpkey http://dragos.com/ kyxpgp
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Jacques A. Vidrine: "Re: OpenSSL heads-up"

    Relevant Pages

    • Re: OpenSSL heads-up
      ... >> libraries. ... Two of these could allow a Denial of Service attack, ... >> may result in an attacker being able to execute malicious code under ... This issue does not affect OpenSSL ...
      (FreeBSD-Security)
    • [VulnWatch] Vulnerability Issues in OpenSSL
      ... Vulnerability Issues in OpenSSL ... versions of SSLeay. ... Two of these could allow a Denial of Service attack, ...
      (VulnWatch)