Nortel response to OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability - CVE-2006-3738
| Description: |
Before taking any action please ensure that you are viewing the latest official version of this security advisory by referencing http://www.nortel.com/securityadvisories =========== == Source == =========== On September 28, 2006 - DeepSight Alert Service identified an OpenSSL vulnerability as Bugtraq Id 20249. This vulnerability is also identified as CVE-2006-3738. Link to OpenSSL Advisory: http://www.openssl.org/news/secadv_20060928.txt (refer to CVE-2006-3738). ============= == Overview == ============= OpenSSL is prone to a buffer-overflow vulnerability; fixes are available. Successfully exploiting this issue may result in the execution of arbitrary machine code in the context of applications that utilize the affected library. Failed exploit attempts may result in crashing applications, denying service to legitimate users. Some Nortel products are potentially affected by this issue. Please see the Analysis section of this bulletin for a breakdown per product. |
| Type: |
Security Advisories |
| Number: |
2006007439, Rev 1 |
| Status: |
Retired |
| Date: |
2007-10-31 |
