Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » OpenSSL Kerberos Enabled SSLv3 Master Key Exchange Buffer Overflow Vuln.

OpenSSL Kerberos Enabled SSLv3 Master Key Exchange Buffer Overflow Vuln.

by Nikola Strahija on August 3rd, 2002 A vulnerability has been reported for OpenSSL 0.9.7 pre-release versions. When initiatiating contact between a SSLv3 server, master keys are exchanged between the client and the server. When an oversized master key is supplied to a SSL version 3 server by a malicious client, it may cause a buffer to overflow on the vulnerable system. Execution of arbitrary code as the server process may be possible.


This vulnerability is present only when Kerberos is enabled for a system using SSL version 3.

Remote: Yes

Exploit: No


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »