CVE-2006-4343

Openssl - NULL Pointer Dereference

Title source: rule

Description

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Noam Rathaus · perldosmultiple

https://www.exploit-db.com/exploits/4773

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by Noam Rathaus · perldosmultiple

https://www.exploit-db.com/exploits/28726

View Code ZIP pw:eip

References (131)

[Permissions Required, Third Party Advisory] http://www.vupen.com/english/advisories/2006/4750

[Third Party Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2006:172

[Third Party Advisory] http://secunia.com/advisories/22212

[Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/4773

[Third Party Advisory] http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html

[Third Party Advisory] http://secunia.com/advisories/23915

[Broken Link] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1016943

[Third Party Advisory] http://secunia.com/advisories/23038

[Broken Link] http://www.trustix.org/errata/2006/0054

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/29240

[Third Party Advisory] http://www.debian.org/security/2006/dsa-1195

[Third Party Advisory] http://secunia.com/advisories/23309

[Third Party Advisory] http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html

[Permissions Required, Third Party Advisory] http://www.vupen.com/english/advisories/2006/4401

[Third Party Advisory] http://www.ubuntu.com/usn/usn-353-1

[Broken Link] http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227

[Third Party Advisory] http://secunia.com/advisories/22116

[Broken Link] https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144

[Third Party Advisory] http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm

... and 111 more

Scores

EPSS 0.0693

EPSS Percentile 91.4%

Details

CWE

CWE-476

Status published

Products (20)

canonical/ubuntu_linux 5.04

canonical/ubuntu_linux 5.10

canonical/ubuntu_linux 6.06

debian/debian_linux 3.1

openssl/openssl 0.9.7

openssl/openssl 0.9.7a

openssl/openssl 0.9.7b

openssl/openssl 0.9.7c

openssl/openssl 0.9.7d

openssl/openssl 0.9.7e

... and 10 more

Published Sep 28, 2006

Tracked Since Feb 18, 2026