View Definition
| Definition Id: oval:org.mitre.oval:def:928 | Version: 2 Last Modified: 2007-04-10 | ||
| Title: | Red Hat Enterprise 3 OpenSSL Kerberos Handshake Vulnerability | ||
| Description: | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read. | ||
| Family: | unix | Class: | vulnerability |
| Status: | ACCEPTED | Reference(s): |
CVE-2004-0112
|
| Platform(s): | Red Hat Enterprise Linux 3 | Product(s): | OpenSSL |
| Definition Synopsis: | |||
