CVE-2005-1730

Sažetak

Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted packets, as demonstrated by "OpenSSL ASN.1 brute forcer." NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, or CVE-2004-0112.

Reference

http://www.cirt.dk/advisories/cirt-32-advisory.pdf
http://www.securityfocus.com/bid/8732
http://www.securityfocus.com/data/vulnerabilities/exploits/ASN.1-Brute.c
http://www.vupen.com/english/advisories/2005/0744

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

08-03-2011 - 02:22

Objavljeno

31-12-2005 - 05:00