OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.

This update adds openssl patches since 2007 for :

  - CVE-2008-5077

  - CVE-2009-0590

  - CVE-2009-0789

  - CVE-2009-3555

  - CVE-2010-4180

According to its banner, the remote server is running a version of OpenSSL that is earlier than 0.9.8l.  As such, it may be affected by multiple vulnerabilities :

  - A remote attacker could crash the server by sending     malformed ASN.1 data. This flaw only affects some     architectures, Win64 and other unspecified platforms.     (CVE-2009-0789)

  - A remote attacker could saturate the server by sending     a big number of 'future epoch' DTLS records.     (CVE-2009-1377)

  - A remote attacker could saturate the server by sending     duplicate DTLS records, or DTLS records with too big     sequence numbers. (CVE-2009-1378)

  - A remote attacker could spoof certificates by computing     MD2 hash collisions. (CVE-2009-2409)

The version of OpenSSL installed on the remote host is prior to 0.9.8k. It is, therefore, affected by multiple vulnerabilities as referenced in the 0.9.8k advisory.

  - OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1     structure, which allows remote attackers to cause a denial of service (invalid memory access and     application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA     public key. (CVE-2009-0789)

  - The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle     errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature     that originally appeared to be valid but was actually invalid. (CVE-2009-0591)

  - The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of     service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString     or (2) UniversalString with an invalid encoded length. (CVE-2009-0590)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update adds openssl patches since 2007 for :

  - CVE-2009-0590

  - CVE-2008-5077

  - CVE-2009-0789

  - CVE-2009-3555

  - CVE-2010-4180

This update of openssl fixes the following problems :

  - ASN1_STRING_print_ex() function allows remote denial of     service. (CVE-2009-0590)

  - denial of service due to malformed ASN.1 structures.
    (CVE-2009-0789)

This update of openssl fixes the following problems :

  - ASN1_STRING_print_ex() function allows remote denial of     service. (CVE-2009-0590)

  - CMS_verify() function allows signatures to look valid.
    (CVE-2009-0591)

  - denial of service due to malformed ASN.1 structures.
    (CVE-2009-0789)

This update of OpenSSL fixes the following problems :

  - ASN1_STRING_print_ex() function allows remote denial of     service. (CVE-2009-0590)

  - denial of service due to malformed ASN.1 structures.
    (CVE-2009-0789)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied.

This security update contains fixes for the following products :

  - Alias Manager
  - CarbonCore
  - ClamAV
  - ColorSync
  - CoreGraphics
  - CUPS
  - Flash Player plug-in
  - ImageIO
  - Launch Services
  - MySQL
  - PHP
  - SMB
  - Wiki Server

This update of openssl fixes the following problems :

  - CVE-2009-0590: ASN1_STRING_print_ex() function allows     remote denial of service

  - CVE-2009-0591: CMS_verify() function allows signatures     to look valid

  - CVE-2009-0789: denial of service due to malformed ASN.1     structures

This update of openssl fixes the following problems :

  - CVE-2009-0590: ASN1_STRING_print_ex() function allows     remote denial of service

  - CVE-2009-0789: denial of service due to malformed ASN.1     structures

New openssl packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues.

ID	Name	Product	Family	Severity
75802	openSUSE Security Update : compat-openssl097g (openSUSE-SU-2011:0845-1)	Nessus	SuSE Local Security Checks	medium
75453	openSUSE Security Update : compat-openssl097g (openSUSE-SU-2011:0845-1)	Nessus	SuSE Local Security Checks	medium
17765	OpenSSL < 0.9.8l Multiple Vulnerabilities	Nessus	Web Servers	medium
17763	OpenSSL 0.9.8 < 0.9.8k Multiple Vulnerabilities	Nessus	Web Servers	high
57170	SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 7645)	Nessus	SuSE Local Security Checks	medium
55715	SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 7644)	Nessus	SuSE Local Security Checks	medium
55711	SuSE 11.1 Security Update : compat-openssl097g (SAT Patch Number 4913)	Nessus	SuSE Local Security Checks	medium
41571	SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6179)	Nessus	SuSE Local Security Checks	medium
41491	SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 6170)	Nessus	SuSE Local Security Checks	medium
41423	SuSE 11 Security Update : OpenSSL (SAT Patch Number 772)	Nessus	SuSE Local Security Checks	medium
41376	SuSE 11 Security Update : OpenSSL (SAT Patch Number 789)	Nessus	SuSE Local Security Checks	medium
41293	SuSE9 Security Update : OpenSSL (YOU Patch Number 12397)	Nessus	SuSE Local Security Checks	medium
40945	Mac OS X Multiple Vulnerabilities (Security Update 2009-005)	Nessus	MacOS X Local Security Checks	critical
40260	openSUSE Security Update : libopenssl-devel (libopenssl-devel-786)	Nessus	SuSE Local Security Checks	medium
40204	openSUSE Security Update : compat-openssl097g (compat-openssl097g-788)	Nessus	SuSE Local Security Checks	medium
40033	openSUSE Security Update : libopenssl-devel (libopenssl-devel-785)	Nessus	SuSE Local Security Checks	medium
39938	openSUSE Security Update : compat-openssl097g (compat-openssl097g-788)	Nessus	SuSE Local Security Checks	medium
38646	openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6173)	Nessus	SuSE Local Security Checks	medium
38643	openSUSE 10 Security Update : compat-openssl097g (compat-openssl097g-6175)	Nessus	SuSE Local Security Checks	medium
36104	Slackware 11.0 / 12.0 / 12.1 / 12.2 / current : openssl (SSA:2009-098-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2009-0789

high

Tenable Plugins

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

medium

medium

medium