Summary
This host is installed with OpenSSL and is prone to Denial Of Service Vulnerability.
Impact
Successful exploitation will allow attacker to cause denial of service conditions.
Impact Level: Application
Solution
Upgrade to version 0.9.8n or later.
For updates refer tohttp://www.slproweb.com/products/Win32OpenSSL.html
Insight
The flaw is due to error in 'kssl_keytab_is_available()' function in 'ssl/kssl.c' which does not check a certain return value when Kerberos is enabled. This allows NULL pointer dereference and daemon crash via SSL cipher negotiation.
Affected
OpenSSL version prior to 0.9.8n on Windows.
References
Severity
Classification
-
CVE CVE-2010-0433 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P
Related Vulnerabilities