vulnwire
5.0med

CVE-2005-2969

The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING opti…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
4.9%
percentile 92%
Public exploits
0
none known

The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.

Exploit prediction (EPSS)

4.87% probability of exploitation in the next 30 days, higher than 92% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N

Classification

Technology feeds
OpenSSL (RSS, critical only)

References

  • secunia.com /advisories/17259 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/23915 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • novell.com /linux/security/advisories/2005_61_openssl.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/26893 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/17389 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2005/3056 · vdb-entry, x_refsource_VUPEN, x_transferred
  • vupen.com /english/advisories/2007/2457 · vdb-entry, x_refsource_VUPEN, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2006-260.htm · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/17813 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/15071 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/18165 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/23340 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18123 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2005/dsa-881 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • www-1.ibm.com /support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754 · x_refsource_MISC, x_transferred
  • hitachi-support.com /security_e/vuls_e/HS07-016_e/index-e.html · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2005/2659 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/24799 · vdb-entry, x_refsource_BID, x_transferred
  • debian.org /security/2005/dsa-882 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • cisco.com /warp/public/707/cisco-response-20051202-openssl.shtml · vendor-advisory, x_refsource_CISCO, x_transferred
  • secunia.com /advisories/17153 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • itrc.hp.com /service/cki/docDisplay.do?docId=c00849540 · vendor-advisory, x_refsource_HP, x_transferred
  • lists.trustix.org /pipermail/tsl-announce/2005-October/000354.html · vendor-advisory, x_refsource_TRUSTIX, x_transferred
  • secunia.com /advisories/17191 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2005/2908 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securitytracker.com /id?1015032 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • issues.rpath.com /browse/RPL-1633 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/17344 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/19185 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2005/2036 · vdb-entry, x_refsource_VUPEN, x_transferred
  • juniper.net /support/security/alerts/PSN-2005-12-025.txt · x_refsource_MISC, x_transferred
  • secunia.com /advisories/17589 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2005/2710 · vdb-entry, x_refsource_VUPEN, x_transferred
  • vupen.com /english/advisories/2005/3002 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/31492 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/17466 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2008-0629.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/17146 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/17169 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/35287 · vdb-entry, x_refsource_XF, x_transferred
  • docs.info.apple.com /article.html?artnum=302847
  • itrc.hp.com /service/cki/docDisplay.do?docId=c00805100
  • secunia.com /advisories/17151
  • secunia.com /advisories/17178
  • secunia.com /advisories/17180
  • secunia.com /advisories/17189
  • secunia.com /advisories/17210
  • secunia.com /advisories/17288
  • secunia.com /advisories/17335
  • secunia.com /advisories/17409
  • secunia.com /advisories/17432
  • secunia.com /advisories/17617
  • secunia.com /advisories/17632
  • secunia.com /advisories/17888
  • secunia.com /advisories/18045
  • secunia.com /advisories/18663
  • secunia.com /advisories/21827
  • secunia.com /advisories/23280
  • secunia.com /advisories/23843
  • secunia.com /advisories/25973

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.