CVEvulnerability
CVE-2006-3738
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-09-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.
Affected configurations
• openssl openssl 0.9.7
• openssl openssl 0.9.7a
• openssl openssl 0.9.7b
• openssl openssl 0.9.7c
• openssl openssl 0.9.7d
• openssl openssl 0.9.7e
• openssl openssl 0.9.7f
• openssl openssl 0.9.7g
• openssl openssl 0.9.7h
• openssl openssl 0.9.7i
• openssl openssl 0.9.7j
• openssl openssl 0.9.7k
• openssl openssl 0.9.8
• openssl openssl 0.9.8a
• openssl openssl 0.9.8b
• openssl openssl 0.9.8c
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc ftp.netbsd.org
- ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc patches.sgi.com
- http://docs.info.apple.com/article.html?artnum=304829 docs.info.apple.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 h20000.www2.hp.com
- http://issues.rpath.com/browse/RPL-613 issues.rpath.com
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 itrc.hp.com
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 itrc.hp.com
- http://kolab.org/security/kolab-vendor-notice-11.txt Patch
- http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html lists.apple.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html Patch
- http://marc.info/?l=bugtraq&m=130497311408250&w=2 marc.info
- http://openbsd.org/errata.html#openssl2 Patch
- http://openvpn.net/changelog.html Patch
- http://secunia.com/advisories/22094 Patch, Vendor Advisory
- http://secunia.com/advisories/22116 Patch, Vendor Advisory
- http://secunia.com/advisories/22130 Patch, Vendor Advisory
- http://secunia.com/advisories/22165 Patch, Vendor Advisory
- http://secunia.com/advisories/22166 Patch, Vendor Advisory
- http://secunia.com/advisories/22172 Patch, Vendor Advisory
- http://secunia.com/advisories/22186 Patch, Vendor Advisory
- http://secunia.com/advisories/22193 Patch, Vendor Advisory
- http://secunia.com/advisories/22207 Patch, Vendor Advisory
- http://secunia.com/advisories/22212 Patch, Vendor Advisory
- http://secunia.com/advisories/22216 Patch, Vendor Advisory
- http://secunia.com/advisories/22220 Patch, Vendor Advisory
- http://secunia.com/advisories/22240 Patch, Vendor Advisory
- http://secunia.com/advisories/22259 Patch, Vendor Advisory
- http://secunia.com/advisories/22260 Patch, Vendor Advisory
- http://secunia.com/advisories/22284 Patch, Vendor Advisory
- http://secunia.com/advisories/22298 secunia.com
- http://secunia.com/advisories/22330 Patch, Vendor Advisory
- http://secunia.com/advisories/22385 secunia.com
- http://secunia.com/advisories/22460 secunia.com
- http://secunia.com/advisories/22487 secunia.com
- http://secunia.com/advisories/22500 secunia.com
- http://secunia.com/advisories/22544 secunia.com
- http://secunia.com/advisories/22626 secunia.com
- http://secunia.com/advisories/22633 secunia.com
- http://secunia.com/advisories/22654 secunia.com
- http://secunia.com/advisories/22758 secunia.com
- http://secunia.com/advisories/22772 secunia.com
- http://secunia.com/advisories/22791 secunia.com
- http://secunia.com/advisories/22799 secunia.com
- http://secunia.com/advisories/23038 secunia.com
- http://secunia.com/advisories/23155 secunia.com
- http://secunia.com/advisories/23280 secunia.com
- http://secunia.com/advisories/23309 secunia.com
- http://secunia.com/advisories/23340 secunia.com
- http://secunia.com/advisories/23680 secunia.com
- http://secunia.com/advisories/23794 secunia.com
- http://secunia.com/advisories/23915 secunia.com
- http://secunia.com/advisories/24930 secunia.com
- http://secunia.com/advisories/24950 secunia.com
- http://secunia.com/advisories/25889 secunia.com
- http://secunia.com/advisories/26329 secunia.com
- http://secunia.com/advisories/30124 secunia.com
- http://secunia.com/advisories/30161 secunia.com
- http://secunia.com/advisories/31492 secunia.com
- http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200610-11.xml security.gentoo.org
- http://securitytracker.com/id?1016943 Patch
- http://securitytracker.com/id?1017522 securitytracker.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 Patch
- http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 sourceforge.net
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1 sunsolve.sun.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm support.avaya.com
- http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html www.cisco.com
- http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml www.cisco.com
- http://www.debian.org/security/2006/dsa-1185 Patch
- http://www.debian.org/security/2006/dsa-1195 Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml www.gentoo.org
- http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml www.gentoo.org
- http://www.kb.cert.org/vuls/id/547300 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2006_24_sr.html Patch, Vendor Advisory