[VulnWatch] Vulnerability Issues in OpenSSL

[Chris Wysopal <weld@vulnwatch.org>]

Full Advisory:
http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm

Vulnerability Issues in OpenSSL

Version Information
Advisory Reference      006489/OpenSSL
Release Date    30 September 2003
Last Revision   30 September 2003
Version Number  1.1

What is Affected?

All versions of OpenSSL up to and including 0.9.6j and 0.9.7b and all
versions of SSLeay. (SSLeay is no longer maintained.)

Severity

Three specific vulnerabilities have been discovered in the OpenSSL
libraries. Two of these could allow a Denial of Service attack, the third
may result in an attacker being able to execute malicious code under
certain conditions.