FreeBSD-SA-04:05.openssl question

From: Rostislav Krasny (rosti_bsd_at_yahoo.com)
Date: 03/18/04

  • Next message: Dag-Erling Smørgrav: "Re: FreeBSD-SA-04:05.openssl question" 
    Date: Wed, 17 Mar 2004 16:45:00 -0800 (PST)
To: freebsd-security@freebsd.org

    Hello there.

    The FreeBSD-SA-04:05.openssl Security Advisory announced a
    "null-pointer assignment during SSL handshake" DoS vulnerability.
    However, the OpenSSH Security Advisory of 17 March 2004 announced the
    same vulnerability with one more vulnerability. Look at
    http://www.openssl.org/news/secadv_20040317.txt
    Isn't FreeBSD vulnerable to the second "Out-of-bounds read affects
    Kerberos ciphersuites" security problem?

    Thanks

    __________________________________
    Do you Yahoo!?
    Yahoo! Mail - More reliable, more storage, less spam
    http://mail.yahoo.com
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Dag-Erling Smørgrav: "Re: FreeBSD-SA-04:05.openssl question"

    Relevant Pages