Web Browser 로는 FTP 접속이 불가능 합니다.

문서번호 : 1159788538
업데이트 : 2006.10.02


상세내용

OpenSSL 프로젝트는 견고하고 상용 제품 수준의 품질을 갖추고 풍부한 기능을
갖는 오픈 소스 툴킷으로서 보안 소켓 계층(SSL v2/v3)과 전송 계층 보안(TLS v1)
프로토콜을 구현하고 있다.

CVE-2006-2937:
OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to
cause a denial of service (inifnite loop and memory consumption) via malformed
ASN.1 structures that trigger an improperly handled error condition.

CVE-2006-2940:
OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows
attackers to cause a denial of service (CPU consumption) via certain public
keys that require extra time to process.

CVE-2006-3738:
Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before
0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and
remote attack vectors involving a long list of ciphers.

CVE-2006-4343:
Unspecified vulnerability in the SSLv2 client code in OpenSSL 0.9.7 before
0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to
cause a denial of service (client crash) via unknown vectors.


Autoupdates 지원 : 지원


update 패키지

  RPMS :

    . openssl-0.9.6g-12.i686.rpm
    . openssl-devel-0.9.6g-12.i686.rpm

  SRPMS :

    . openssl-0.9.6g-12.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2937
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2940
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3738
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4343