USN-1428-1 : openssl vulnerability

NASLDB: USN-1428-1 : openssl vulnerability

General

ID: 58873
Name: USN-1428-1 : openssl vulnerability

Summary: Checks dpkg output for updated package(s)

Credits: –

Classification

Risk: –

CVSS: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: Ubuntu Local Security Checks
Type: Local

Description

It was discovered that the fix for CVE-2012-2110 was incomplete for
OpenSSL 0.9.8. A remote attacker could trigger this flaw in services
that used SSL to cause a denial of service or possibly execute
arbitrary code with application privileges. Ubuntu 11.10 was not
affected by this issue. (CVE-2012-2131)

The original upstream fix for CVE-2012-2110 would cause
BUF_MEM_grow_clean() to sometimes return the wrong error condition.
This update fixes the problem.