CVE-2007-5135

Published: Sep 27, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible.

Affected (26)

Products: Openssl: Openssl

Openssl

1 product

Openssl

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Version 0.9.7
Openssl Openssl	Version 0.9.7 beta1
Openssl Openssl	Version 0.9.7 beta2
Openssl Openssl	Version 0.9.7 beta3
Openssl Openssl	Version 0.9.7 beta4
Openssl Openssl	Version 0.9.7 beta5
Openssl Openssl	Version 0.9.7 beta6
Openssl Openssl	Version 0.9.7a
Openssl Openssl	Version 0.9.7b
Openssl Openssl	Version 0.9.7c
Openssl Openssl	Version 0.9.7d
Openssl Openssl	Version 0.9.7e
Openssl Openssl	Version 0.9.7f
Openssl Openssl	Version 0.9.7g
Openssl Openssl	Version 0.9.7h
Openssl Openssl	Version 0.9.7i
Openssl Openssl	Version 0.9.7j
Openssl Openssl	Version 0.9.7k
Openssl Openssl	Version 0.9.7l
Openssl Openssl	Version 0.9.8
Openssl Openssl	Version 0.9.8a
Openssl Openssl	Version 0.9.8b
Openssl Openssl	Version 0.9.8c
Openssl Openssl	Version 0.9.8d
Openssl Openssl	Version 0.9.8e
Openssl Openssl	Version 0.9.8f

Related CWEs

CWE-189

References (150)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc (unsafe URL)

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html

Source: cve@mitre.org

http://lists.vmware.com/pipermail/security-announce/2008/000002.html

Source: cve@mitre.org

http://secunia.com/advisories/22130

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27012

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27021

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27031

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27051

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27078

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27097

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27186

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27205

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27217

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27229

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27330

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27394

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27851

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27870

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27961

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28368

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29242

Source: cve@mitre.org

http://secunia.com/advisories/30124

Source: cve@mitre.org

http://secunia.com/advisories/30161

Source: cve@mitre.org

http://secunia.com/advisories/31308

Source: cve@mitre.org

http://secunia.com/advisories/31326

Source: cve@mitre.org

http://secunia.com/advisories/31467

Source: cve@mitre.org

http://secunia.com/advisories/31489

Source: cve@mitre.org

http://security.freebsd.org/advisories/FreeBSD-SA-07:08.openssl.asc

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200710-06.xml

Source: cve@mitre.org

http://securityreason.com/securityalert/3179

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103130-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200858-1

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0241

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1379

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:193

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_20_sr.html

Source: cve@mitre.org

http://www.openbsd.org/errata40.html

Source: cve@mitre.org

http://www.openbsd.org/errata41.html

Source: cve@mitre.org

http://www.openbsd.org/errata42.html

Source: cve@mitre.org

http://www.openssl.org/news/secadv_20071012.txt

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0813.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0964.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1003.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/480855/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/481217/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/481488/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/481506/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/484353/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485936/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/486859/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25831

Source: cve@mitre.org

http://www.securitytracker.com/id?1018755

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2008-0001.html

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2008-0013.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3325

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3625

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4042

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4144

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0064

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2268

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2361

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2362

Source: cve@mitre.org

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4037

Source: cve@mitre.org

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4038

Source: cve@mitre.org

https://bugs.gentoo.org/show_bug.cgi?id=194039

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36837

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1769

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1770

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10904

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5337

Source: cve@mitre.org

https://usn.ubuntu.com/522-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html

Source: cve@mitre.org

Vendor Advisory

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc (unsafe URL)