简体中文

CVE-2006-3738：详情

CVE-2006-3738

53.74%V4
2006-09-28
18h00 +00:00
Overflow
Network
2024-08-07
18h39 +00:00
CVE.org
NVD
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

指标

指标 评分 严重程度 CVSS 向量 来源
V2 10 AV:N/AC:L/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSS 是一种预测漏洞被利用可能性的评分模型。

EPSS 评分

EPSS 模型生成一个介于 0 到 1（即 0% 到 100%）之间的概率评分。评分越高，漏洞被利用的可能性越大。

EPSS 百分位

百分位用于根据 EPSS 评分对 CVE 进行排名。例如，EPSS 百分位为第 95 的 CVE，其被利用的可能性高于 95% 的其他 CVE。因此，百分位可用于比较不同 CVE 的 EPSS 评分。
EPSS First.org

相关产品

配置 0

Openssl>>Openssl >> Version 0.9.7

Openssl>>Openssl >> Version 0.9.7a

Openssl>>Openssl >> Version 0.9.7b

Openssl>>Openssl >> Version 0.9.7c

Openssl>>Openssl >> Version 0.9.7d

Openssl>>Openssl >> Version 0.9.7e

Openssl>>Openssl >> Version 0.9.7f

Openssl>>Openssl >> Version 0.9.7g

Openssl>>Openssl >> Version 0.9.7h

Openssl>>Openssl >> Version 0.9.7i

Openssl>>Openssl >> Version 0.9.7j

Openssl>>Openssl >> Version 0.9.7k

Openssl>>Openssl >> Version 0.9.8

Openssl>>Openssl >> Version 0.9.8a

Openssl>>Openssl >> Version 0.9.8b

Openssl>>Openssl >> Version 0.9.8c

参考资料

http://www.mandriva.com/security/advisories?name=MDKSA-2006:172
Tags : vendor-advisory, x_refsource_MANDRIVA
http://secunia.com/advisories/22212
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4750
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/23915
Tags : third-party-advisory, x_refsource_SECUNIA
http://securitytracker.com/id?1016943
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/23038
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.trustix.org/errata/2006/0054
Tags : vendor-advisory, x_refsource_TRUSTIX
http://www.debian.org/security/2006/dsa-1195
Tags : vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/23309
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4401
Tags : vdb-entry, x_refsource_VUPEN
http://www.ubuntu.com/usn/usn-353-1
Tags : vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/22116
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://www.kb.cert.org/vuls/id/547300
Tags : third-party-advisory, x_refsource_CERT-VN
http://secunia.com/advisories/22166
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-0695.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/23340
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4314
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/22385
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22758
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22487
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22772
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22165
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/23794
Tags : third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP
http://secunia.com/advisories/22220
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/23680
Tags : third-party-advisory, x_refsource_SECUNIA
http://openvpn.net/changelog.html
Tags : x_refsource_CONFIRM
http://secunia.com/advisories/25889
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4036
Tags : vdb-entry, x_refsource_VUPEN
http://openbsd.org/errata.html#openssl2
Tags : vendor-advisory, x_refsource_OPENBSD
http://secunia.com/advisories/30124
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22626
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/22083
Tags : vdb-entry, x_refsource_BID
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178
Tags : vendor-advisory, x_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2006/3869
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/22544
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22298
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22130
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/31492
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22284
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/24930
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-0629.html
Tags : vendor-advisory, x_refsource_REDHAT
http://security.gentoo.org/glsa/glsa-200610-11.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://issues.rpath.com/browse/RPL-613
Tags : x_refsource_CONFIRM
http://secunia.com/advisories/26329
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22260
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/0343
Tags : vdb-entry, x_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/3860
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/23280
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4264
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/22193
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.osvdb.org/29262
Tags : vdb-entry, x_refsource_OSVDB
http://secunia.com/advisories/23155
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22799
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4417
Tags : vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.serv-u.com/releasenotes/
Tags : x_refsource_CONFIRM
http://www.securityfocus.com/bid/20249
Tags : vdb-entry, x_refsource_BID
http://www.vupen.com/english/advisories/2006/4443
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/30161
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://secunia.com/advisories/22094
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22186
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22633
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2315
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/22500
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.us-cert.gov/cas/techalerts/TA06-333A.html
Tags : third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/22216
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/3820
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/22654
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/1401
Tags : vdb-entry, x_refsource_VUPEN
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1
Tags : vendor-advisory, x_refsource_SUNALERT
http://www.vupen.com/english/advisories/2006/3936
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/22240
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22330
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1185
Tags : vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/22207
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177
Tags : vendor-advisory, x_refsource_MANDRIVA
http://securitytracker.com/id?1017522
Tags : vdb-entry, x_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/3902
Tags : vdb-entry, x_refsource_VUPEN
http://www.vupen.com/english/advisories/2007/2783
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/22259
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22460
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22791
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22172
Tags : third-party-advisory, x_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1
Tags : vendor-advisory, x_refsource_SUNALERT
http://secunia.com/advisories/24950
Tags : third-party-advisory, x_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1
Tags : vendor-advisory, x_refsource_SUNALERT
cvefind.com 上展示的信息来源于多个精心选择的权威数据源。CVE 数据由 MITRE Corporation 和 National Vulnerability Database (NVD) 提供。已知被利用漏洞（KEV）目录来源于 Cybersecurity and Infrastructure Security Agency (CISA)，EPSS 评分来自 FIRST.org。此外，软件弱点（CWE）和常见攻击模式（CAPEC）数据由 MITRE Corporation 维护，硬件和软件配置（CPE）信息由 NVD 提供。