CVE-2006-3738

CRÍTIC (10,0)

CVSS3: 0,0

El desbordament de memòria intermèdia a la funció SSL_get_shared_ciphers a OpenSSL 0.9.7 abans de la 0.9.7l, 0.9.8 abans de la 0.9.8d i versions anteriors té un impacte no especificat i vectors d’atac remot que impliquen una llarga llista de xifratges.

post:/platform/configuration/security/service-accountsdelete:/platform/configuration/security/service-accounts/{user_id}patch:/platform/configuration/security/service-accounts/{user_id}post:/platform/configuration/security/service-accounts/{user_id}/keysdelete:/platform/configuration/security/service-accounts/{user_id}/keys/{api_key_id}patch:/userpost:/userspost:/users/auth/keysdelete:/users/auth/keysdelete:/users/auth/keys/_alldelete:/users/auth/keys/{api_key_id}delete:/users/{user_id}/auth/keysdelete:/users/{user_id}/auth/keys/{api_key_id}delete:/users/{user_name}patch:/users/{user_name}

Sistemes Afectats

• Openssl Openssl 0.9.7
• Openssl Openssl 0.9.7a
• Openssl Openssl 0.9.7b
• Openssl Openssl 0.9.7c
• Openssl Openssl 0.9.7d
• Openssl Openssl 0.9.7e
• Openssl Openssl 0.9.7f
• Openssl Openssl 0.9.7g
• Openssl Openssl 0.9.7h
• Openssl Openssl 0.9.7i
• Openssl Openssl 0.9.7j
• Openssl Openssl 0.9.7k
• Openssl Openssl 0.9.8
• Openssl Openssl 0.9.8a
• Openssl Openssl 0.9.8b
• Openssl Openssl 0.9.8c

Remediació

Vegeu-ne les Referències.

Referències

• Patch
• Patch
• Patch
• Patch
• Patch;Vendor Advisory