CVE-2006-3738

Published: Sep 28, 2006Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.

Affected (16)

Products: Openssl: Openssl

Openssl

1 product

Openssl

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Version 0.9.7
Openssl Openssl	Version 0.9.7a
Openssl Openssl	Version 0.9.7b
Openssl Openssl	Version 0.9.7c
Openssl Openssl	Version 0.9.7d
Openssl Openssl	Version 0.9.7e
Openssl Openssl	Version 0.9.7f
Openssl Openssl	Version 0.9.7g
Openssl Openssl	Version 0.9.7h
Openssl Openssl	Version 0.9.7i
Openssl Openssl	Version 0.9.7j
Openssl Openssl	Version 0.9.7k
Openssl Openssl	Version 0.9.8
Openssl Openssl	Version 0.9.8a
Openssl Openssl	Version 0.9.8b
Openssl Openssl	Version 0.9.8c

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (250)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc (unsafe URL)

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc (unsafe URL)

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=304829

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771

Source: secalert@redhat.com

http://issues.rpath.com/browse/RPL-613

Source: secalert@redhat.com

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100

Source: secalert@redhat.com

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540

Source: secalert@redhat.com

http://kolab.org/security/kolab-vendor-notice-11.txt

Source: secalert@redhat.com

Patch

http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html

Source: secalert@redhat.com

http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html

Source: secalert@redhat.com

Patch

http://marc.info/?l=bugtraq&m=130497311408250&w=2

Source: secalert@redhat.com

http://openbsd.org/errata.html#openssl2

Source: secalert@redhat.com

Patch

http://openvpn.net/changelog.html

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/22094

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22116

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22130

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22165

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22166

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22172

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22186

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22193

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22207

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22212

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22216

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22220

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22240

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22259

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22260

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22284

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22298

Source: secalert@redhat.com

http://secunia.com/advisories/22330

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22385

Source: secalert@redhat.com

http://secunia.com/advisories/22460

Source: secalert@redhat.com

http://secunia.com/advisories/22487

Source: secalert@redhat.com

http://secunia.com/advisories/22500

Source: secalert@redhat.com

http://secunia.com/advisories/22544

Source: secalert@redhat.com

http://secunia.com/advisories/22626

Source: secalert@redhat.com

http://secunia.com/advisories/22633

Source: secalert@redhat.com

http://secunia.com/advisories/22654

Source: secalert@redhat.com

http://secunia.com/advisories/22758

Source: secalert@redhat.com

http://secunia.com/advisories/22772

Source: secalert@redhat.com

http://secunia.com/advisories/22791

Source: secalert@redhat.com

http://secunia.com/advisories/22799

Source: secalert@redhat.com

http://secunia.com/advisories/23038

Source: secalert@redhat.com

http://secunia.com/advisories/23155

Source: secalert@redhat.com

http://secunia.com/advisories/23280

Source: secalert@redhat.com

http://secunia.com/advisories/23309

Source: secalert@redhat.com

http://secunia.com/advisories/23340

Source: secalert@redhat.com

http://secunia.com/advisories/23680

Source: secalert@redhat.com

http://secunia.com/advisories/23794

Source: secalert@redhat.com

http://secunia.com/advisories/23915

Source: secalert@redhat.com

http://secunia.com/advisories/24930

Source: secalert@redhat.com

http://secunia.com/advisories/24950

Source: secalert@redhat.com

http://secunia.com/advisories/25889

Source: secalert@redhat.com

http://secunia.com/advisories/26329

Source: secalert@redhat.com

http://secunia.com/advisories/30124

Source: secalert@redhat.com

http://secunia.com/advisories/30161

Source: secalert@redhat.com

http://secunia.com/advisories/31492

Source: secalert@redhat.com

http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc

Source: secalert@redhat.com

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200610-11.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1016943

Source: secalert@redhat.com

Patch

http://securitytracker.com/id?1017522

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946

Source: secalert@redhat.com

Patch

http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1

Source: secalert@redhat.com

Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm

Source: secalert@redhat.com

http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html

Source: secalert@redhat.com

http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1185

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2006/dsa-1195

Source: secalert@redhat.com

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/547300

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:172

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:177

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:178

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_24_sr.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2006_58_openssl.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.openssl.org/news/secadv_20060928.txt

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html

Source: secalert@redhat.com

http://www.osvdb.org/29262

Source: secalert@redhat.com

Patch

http://www.redhat.com/support/errata/RHSA-2006-0695.html

Source: secalert@redhat.com

Patch

http://www.redhat.com/support/errata/RHSA-2008-0629.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/447318/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/447393/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/456546/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/470460/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/20249

Source: secalert@redhat.com

Patch

http://www.securityfocus.com/bid/22083

Source: secalert@redhat.com

http://www.serv-u.com/releasenotes/

Source: secalert@redhat.com

http://www.trustix.org/errata/2006/0054

Source: secalert@redhat.com

Patch

http://www.ubuntu.com/usn/usn-353-1

Source: secalert@redhat.com

Patch

http://www.us-cert.gov/cas/techalerts/TA06-333A.html

Source: secalert@redhat.com

US Government Resource

http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3820

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3860

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3869

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3902

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3936

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4036

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4264

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4314

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4401

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4417

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4443

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4750

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0343

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1401

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2315

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2783

Source: secalert@redhat.com

http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf

Source: secalert@redhat.com

http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=498093&RenditionID=&poid=8881

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/29237

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4256

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9370

Source: secalert@redhat.com

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144

Source: secalert@redhat.com

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc (unsafe URL)