The version of OpenSSL installed on the remote host is prior to 0.9.8zb. It is, therefore, affected by multiple vulnerabilities as referenced in the 0.9.8zb advisory.

  - The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before     1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer     dereference and client application crash) via a crafted handshake message in conjunction with a (1)     anonymous DH or (2) anonymous ECDH ciphersuite. (CVE-2014-3510)

  - The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n,     and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of '\0' characters,     which allows context-dependent attackers to obtain sensitive information from process stack memory by     reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.
    (CVE-2014-3508)

  - Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n,     and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via     zero-length DTLS fragments that trigger improper handling of the return value of a certain insert     function. (CVE-2014-3507)

  - d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1     before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via crafted DTLS     handshake messages that trigger memory allocations corresponding to large length values. (CVE-2014-3506)

  - Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0     before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application     crash) via crafted DTLS packets that trigger an error condition. (CVE-2014-3505)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

OpenSSL 0.9.8 < 0.9.8zb Multiple Vulnerabilities

high Nessus Plugin ID 77086

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.15 Oct 23, 2024, 3:47 PM Plugin metadata (update thorough_tests attribute) Plugin Feed: 202410231547
Version 1.14 Oct 7, 2024, 1:27 PM Plugin categorization (adding new 'component' to component plugins) Plugin Feed: 202410071327
Version 1.13 Jun 7, 2024, 4:47 PM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv3 score source (set to "CVE-2014-3507") Detection (updated detection logic) Plugin metadata Plugin Feed: 202406071647
Version 1.12 Aug 22, 2023, 10:11 AM Plugin categorization Plugin requirements Plugin Feed: 202308221011