← Back to CVEs

CVE-2005-2969

N/A

Description

The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.

CVE Details

CVSS v3.1 ScoreN/A

Published10/18/2005

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

openssl:openssl

References

ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdf(secalert@redhat.com)

http://docs.info.apple.com/article.html?artnum=302847(secalert@redhat.com)

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100(secalert@redhat.com)

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540(secalert@redhat.com)

http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html(secalert@redhat.com)

http://secunia.com/advisories/17146(secalert@redhat.com)

http://secunia.com/advisories/17151(secalert@redhat.com)

http://secunia.com/advisories/17153(secalert@redhat.com)

http://secunia.com/advisories/17169(secalert@redhat.com)

http://secunia.com/advisories/17178(secalert@redhat.com)

http://secunia.com/advisories/17180(secalert@redhat.com)

http://secunia.com/advisories/17189(secalert@redhat.com)

http://secunia.com/advisories/17191(secalert@redhat.com)

http://secunia.com/advisories/17210(secalert@redhat.com)

http://secunia.com/advisories/17259(secalert@redhat.com)

http://secunia.com/advisories/17288(secalert@redhat.com)

http://secunia.com/advisories/17335(secalert@redhat.com)

http://secunia.com/advisories/17344(secalert@redhat.com)

http://secunia.com/advisories/17389(secalert@redhat.com)

http://secunia.com/advisories/17409(secalert@redhat.com)

http://secunia.com/advisories/17432(secalert@redhat.com)

http://secunia.com/advisories/17466(secalert@redhat.com)

http://secunia.com/advisories/17589(secalert@redhat.com)

http://secunia.com/advisories/17617(secalert@redhat.com)

http://secunia.com/advisories/17632(secalert@redhat.com)

http://secunia.com/advisories/17813(secalert@redhat.com)

http://secunia.com/advisories/17888(secalert@redhat.com)

http://secunia.com/advisories/18045(secalert@redhat.com)

http://secunia.com/advisories/18123(secalert@redhat.com)

http://secunia.com/advisories/18165(secalert@redhat.com)

http://secunia.com/advisories/18663(secalert@redhat.com)

http://secunia.com/advisories/19185(secalert@redhat.com)

http://secunia.com/advisories/21827(secalert@redhat.com)

http://secunia.com/advisories/23280(secalert@redhat.com)

http://secunia.com/advisories/23340(secalert@redhat.com)

http://secunia.com/advisories/23843(secalert@redhat.com)

http://secunia.com/advisories/23915(secalert@redhat.com)

http://secunia.com/advisories/25973(secalert@redhat.com)

http://secunia.com/advisories/26893(secalert@redhat.com)

http://secunia.com/advisories/31492(secalert@redhat.com)

http://securitytracker.com/id?1015032(secalert@redhat.com)

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101974-1(secalert@redhat.com)

http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm(secalert@redhat.com)

http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm(secalert@redhat.com)

http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754(secalert@redhat.com)

http://www.cisco.com/warp/public/707/cisco-response-20051202-openssl.shtml(secalert@redhat.com)

http://www.debian.org/security/2005/dsa-875(secalert@redhat.com)

http://www.debian.org/security/2005/dsa-881(secalert@redhat.com)

http://www.debian.org/security/2005/dsa-882(secalert@redhat.com)

http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html(secalert@redhat.com)

http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html(secalert@redhat.com)

http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt(secalert@redhat.com)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:179(secalert@redhat.com)

http://www.novell.com/linux/security/advisories/2005_61_openssl.html(secalert@redhat.com)

http://www.openssl.org/news/secadv_20051011.txt(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2005-762.html(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2005-800.html(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2008-0629.html(secalert@redhat.com)

http://www.securityfocus.com/bid/15071(secalert@redhat.com)

http://www.securityfocus.com/bid/15647(secalert@redhat.com)

http://www.securityfocus.com/bid/24799(secalert@redhat.com)

http://www.vupen.com/english/advisories/2005/2036(secalert@redhat.com)

http://www.vupen.com/english/advisories/2005/2659(secalert@redhat.com)

http://www.vupen.com/english/advisories/2005/2710(secalert@redhat.com)

http://www.vupen.com/english/advisories/2005/2908(secalert@redhat.com)

http://www.vupen.com/english/advisories/2005/3002(secalert@redhat.com)

http://www.vupen.com/english/advisories/2005/3056(secalert@redhat.com)

http://www.vupen.com/english/advisories/2006/3531(secalert@redhat.com)

http://www.vupen.com/english/advisories/2007/0326(secalert@redhat.com)

http://www.vupen.com/english/advisories/2007/0343(secalert@redhat.com)

http://www.vupen.com/english/advisories/2007/2457(secalert@redhat.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/35287(secalert@redhat.com)

https://issues.rpath.com/browse/RPL-1633(secalert@redhat.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11454(secalert@redhat.com)

ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdf(af854a3a-2127-422b-91ae-364da2661108)

http://docs.info.apple.com/article.html?artnum=302847(af854a3a-2127-422b-91ae-364da2661108)

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100(af854a3a-2127-422b-91ae-364da2661108)

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540(af854a3a-2127-422b-91ae-364da2661108)

http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17146(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17151(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17153(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17169(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17178(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17180(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17189(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17191(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17210(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17259(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17288(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17335(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17344(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17389(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17409(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17432(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17466(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17589(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17617(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17632(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17813(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17888(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/18045(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/18123(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/18165(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/18663(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/19185(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/21827(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/23280(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/23340(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/23843(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/23915(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/25973(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/26893(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/31492(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1015032(af854a3a-2127-422b-91ae-364da2661108)

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101974-1(af854a3a-2127-422b-91ae-364da2661108)

http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm(af854a3a-2127-422b-91ae-364da2661108)

http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm(af854a3a-2127-422b-91ae-364da2661108)

http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754(af854a3a-2127-422b-91ae-364da2661108)

http://www.cisco.com/warp/public/707/cisco-response-20051202-openssl.shtml(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2005/dsa-875(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2005/dsa-881(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2005/dsa-882(af854a3a-2127-422b-91ae-364da2661108)

http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:179(af854a3a-2127-422b-91ae-364da2661108)

http://www.novell.com/linux/security/advisories/2005_61_openssl.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.openssl.org/news/secadv_20051011.txt(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2005-762.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2005-800.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2008-0629.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/15071(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/15647(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/24799(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2005/2036(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2005/2659(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2005/2710(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2005/2908(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2005/3002(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2005/3056(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2006/3531(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2007/0326(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2007/0343(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2007/2457(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/35287(af854a3a-2127-422b-91ae-364da2661108)

https://issues.rpath.com/browse/RPL-1633(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11454(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.