| Package | Affected versions | Patched versions |
|---|---|---|
| webstar | = 4.0= 5.2= 5.2.1= 5.2.2= 5.2.3= 5.2.4= 5.3= 5.3.1 | |
| intuity audix | = 5.1.46= s3210= s3400 | |
| vsu | = 10000_r2.0.1= 100_r2.0.1= 2000_r2.0.1= 5= 500= 5000_r2.0.1= 5x= 7500_r2.0.1 | |
| firewall-1 | = 2.0= next_generation_fp0= next_generation_fp1= next_generation_fp2 | |
| provider-1 | = 4.1 | |
| vpn-1 | = next_generation_fp0= next_generation_fp1= next_generation_fp2= vsx_ng_with_application_intelligence | |
| ciscoworks common management foundation | = 2.1 | |
| ciscoworks common services | = 2.2 | |
| css secure content accelerator | = 1.0= 2.0 | |
| okena stormwatch | = 3.2 | |
| pix firewall | = 6.2.2_.111 | |
| webns | = 6.10= 6.10_b4= 7.10= 7.10_.0.06s= 7.1_0.1.02= 7.1_0.2.06= 7.2_0.0.03 | |
| bsafe ssl-j | = 3.0= 3.0.1= 3.1 | |
| wbem | = a.01.05.08= a.02.00.00= a.02.00.01 | |
| speed technologies litespeed web server | = 1.0.1= 1.0.2= 1.0.3= 1.1= 1.1.1= 1.2.1= 1.2.2= 1.2_rc1= 1.2_rc2= 1.3= 1.3.1= 1.3_rc1= 1.3_rc2= 1.3_rc3 | |
| instant virtual extranet | = 3.0= 3.1= 3.2= 3.3= 3.3.1 | |
| edirectory | = 8.0= 8.5= 8.5.12a= 8.5.27= 8.6.2= 8.7= 8.7.1 | |
| imanager | = 1.5= 2.0 | |
| openssl | = 0.9.6c= 0.9.6d= 0.9.6e= 0.9.6f= 0.9.6g= 0.9.6h= 0.9.6i= 0.9.6j= 0.9.6k= 0.9.7= 0.9.7a= 0.9.7b= 0.9.7c | |
| openssl | = 0.9.6-15= 0.9.6b-3= 0.9.7a-2 | |
| propack | = 2.3= 2.4= 3.0 | |
| servercluster | = 2.5= 2.5.2 | |
| stonebeat fullcluster | = 1_2.0= 1_3.0= 2.0= 2.5= 3.0 | |
| stonebeat securitycluster | = 2.0= 2.5 | |
| stonebeat webcluster | = 2.0= 2.5 | |
| stonegate | = 1.5.17= 1.5.18= 1.6.2= 1.6.3= 1.7= 1.7.1= 1.7.2= 2.0.1= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9= 2.1= 2.2= 2.2.1= 2.2.4 | |
| stonegate vpn client | = 1.7= 1.7.2= 2.0= 2.0.7= 2.0.8= 2.0.9 | |
| tarantella enterprise | = 3.20= 3.30= 3.40 | |
| gsx server | = 2.0= 2.0.1_build_2129= 2.5.1= 2.5.1_build_5336= 3.0_build_7592 |
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free