Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
Ask the Team  Mailing Lists  Advertising Info  Advisories  About SecuriTeam  Blogs Brought to you by: Suppliers of: Website Testing Tools Network Testing Tools Software Testing Tools SecuriTeam in Your Inbox New vulnerability? New tool? Tell us (Our PGP key).	HP-UX Running OpenSSL Unauthorized Data Injection and Denial of Service 17 Dec. 2009    Summary A potential security vulnerability has been identified with HP-UX OpenSSL. The vulnerability could be exploited remotely to inject unauthorized data or to create a Denial of Service (DoS).   Credit: The information has been provided by HP Software Security Response Team. Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    Details Protect your website! Use an External Vulnerability Scanner! Nothing to install. First report in 1 hour! www.beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * HP-UX B.11.11, B.11.23, B.11.31 running OpenSSL before version A.00.09.08l Patch Availability: B.11.11 PA (32 and 64) A.00.09.08l.001 B.11.23 (PA and IA) A.00.09.08l.002 B.11.31 (PA and IA) A.00.09.08l.003 Note: OpenSSL vA.00.09.08l disables renegotiation. Although renegotiation is thought to be rarely used, applications should be tested to evaluate the impact of installing OpenSSL vA.00.09.08l. CVE Information: CVE-2009-3555 ------------------------------------------------------------------------------------------------------------------------------- This vulnerability and over 10,000 others are identified and reported by AVDS, the most technically sophisticated network vulnerability assessment and management system available. *  Comments:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability Microsoft Virtual PC Hypervisor Memory Protection Vulnerability Apple WebKit HTML Element Use After Free Vulnerability Publique! CMS and SQL Injection Vulnerabilities Files2Links F2L-3000 SQL Injection Vulnerability HP-UX Running Apache Data Injection and DoS Vulnerability MIT krb5 KDC denial of service in cross-realm referral processing AproxEngine Multiple Vulnerabilities APC Switched Rack PDU XSS Vulnerability HP-UX Running OpenSSL Unauthorized Data Injection and Denial of Service HP OpenView NNM snmpviewer.exe CGI Host Header Stack Overflow Vulnerability HP OpenView NNM ovwebsnmpsrv.exe OVwSelection Stack Overflow Vulnerability HP-UX Running VRTSweb Remote Execution of Arbitrary Code and Privilege Escalation FreeBSD SSL and TLS Session Renegotiation vulnerability CoreHTTP Web Server Buffer Overflow Vulnerability  Featured Articles Microsoft Embedded OpenType Font Engine Heap Buffer Overflow (MS09-029) Virtualmin Multiple Vulnerabilities Microsoft WordPad Word97 Converter Stack Buffer Overflow Vulnerability (MS09-010) WordPress Unchecked Privileges in admin.php and Multiple Information Disclosures Microsoft PowerPoint Conversion Filter Heap Corruption Vulnerability (MS09-017) Adobe Shockwave Player Director File Parsing Pointer Overwrite Mozilla Firefox Java Applet Loading Vulnerability
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2010 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®