  penguin2
@twtelecom.net
| remote code execution flaw in OpenSSL
OpenSSL is prone to an off-by-one buffer-overflow vulnerability because the library fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successfully exploiting this issue may allow attackers to execute arbitrary machine code in the context of applications that use the affected library »www.securityfocus.com/archive/1/480855 |
|
 SUMware Premium join:2002-05-21 | 2007/09/19 - Fix committed to the OpenSSL_0_9_8-stable branch in CVS. |
|