NVD

Id
1614  
Name
CVE-2008-1672  
Description
OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-05-29  
Modified Date
2011-03-07  
Seq
2008-1672  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10439 1614 CVE-2008-1672 http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html  View
10440 1614 CVE-2008-1672 GLSA-200806-08  View
10441 1614 CVE-2008-1672 SSA:2008-210-08  View
10442 1614 CVE-2008-1672 http://sourceforge.net/project/shownotes.php?release_id=615606  View
10443 1614 CVE-2008-1672 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400  View
10444 1614 CVE-2008-1672 VU#520586  View
10445 1614 CVE-2008-1672 MDVSA-2008:107  View
10446 1614 CVE-2008-1672 http://www.openssl.org/news/secadv_20080528.txt  View
10447 1614 CVE-2008-1672 20080602 rPSA-2008-0181-1 openssl openssl-scripts  View
10448 1614 CVE-2008-1672 29405  View
10449 1614 CVE-2008-1672 1020122  View
10450 1614 CVE-2008-1672 USN-620-1  View
10451 1614 CVE-2008-1672 ADV-2008-1680  View
10452 1614 CVE-2008-1672 ADV-2008-1937  View
10453 1614 CVE-2008-1672 openssl-serverkey-dos(42667)  View
10454 1614 CVE-2008-1672 FEDORA-2008-4723  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46106 JVNDB-2008-001416 OpenSSL TLS ハンドシェイクにサービス運用妨害(DoS)の脆弱性 OpenSSL には、細工された TLS ハンドシェイクパケットを処理する際にサービス運用妨害(DoS)の脆弱性が存在します。 CVE-2008-1672 31785 CVE-2008-1672 1614 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001416.html 2008-06-03 2008-06-27 View