US-CERT
Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information
 

 View Notes By
Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric

 Other Documents
Technical Alerts

Technical Bulletins

Alerts

Security Tips

OpenSSL Information for VU#748355

Date Notified07/22/2002
Date Modified09/30/2002 04:51:59 PM
Status SummaryVulnerable

Vendor Statement

Please see http://www.openssl.org/news/secadv_20020730.txt.

US-CERT Addendum

The OpenSSL team has recently released OpenSSL 0.9.6g to completely remove all known instances of this vulnerability:

ftp://ftp.openssl.org/source/openssl-engine-0.9.6g.tar.gz
ftp://ftp.openssl.org/source/openssl-engine-0.9.6g.tar.gz.asc
ftp://ftp.openssl.org/source/openssl-engine-0.9.6g.tar.gz.md5

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

Produced 2008 by US-CERT, a government organization
Disclaimers and copyright information