Oval Definition:	oval:org.mitre.oval:def:19202
Revision Date: 2015-04-20 Version: 29 Title: HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, Denial of Service (DoS), Authentication Bypass Description: OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2010-4252 Platform(s): HP-UX 11 Product(s): Definition Synopsis Criteria meets HP Security Bulletin HPSBUX02638 HP-UX B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.001 OR openssl.OPENSSL-CONF version is less than A.00.09.08q.001 OR openssl.OPENSSL-DOC version is less than A.00.09.08q.001 OR openssl.OPENSSL-INC version is less than A.00.09.08q.001 OR openssl.OPENSSL-LIB version is less than A.00.09.08q.001 OR openssl.OPENSSL-MAN version is less than A.00.09.08q.001 OR openssl.OPENSSL-MIS version is less than A.00.09.08q.001 OR openssl.OPENSSL-PRNG version is less than A.00.09.08q.001 OR openssl.OPENSSL-PVT version is less than A.00.09.08q.001 OR openssl.OPENSSL-RUN version is less than A.00.09.08q.001 OR openssl.OPENSSL-SRC version is less than A.00.09.08q.001 OR Criteria meets HP Security Bulletin HPSBUX02638 HP-UX B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.002 OR openssl.OPENSSL-CONF version is less than A.00.09.08q.002 OR openssl.OPENSSL-DOC version is less than A.00.09.08q.002 OR openssl.OPENSSL-INC version is less than A.00.09.08q.002 OR openssl.OPENSSL-LIB version is less than A.00.09.08q.002 OR openssl.OPENSSL-MAN version is less than A.00.09.08q.002 OR openssl.OPENSSL-MIS version is less than A.00.09.08q.002 OR openssl.OPENSSL-PRNG version is less than A.00.09.08q.002 OR openssl.OPENSSL-PVT version is less than A.00.09.08q.002 OR openssl.OPENSSL-RUN version is less than A.00.09.08q.002 OR openssl.OPENSSL-SRC version is less than A.00.09.08q.002 OR Criteria meets HP Security Bulletin HPSBUX02638 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.003 OR openssl.OPENSSL-CONF version is less than A.00.09.08q.003 OR openssl.OPENSSL-DOC version is less than A.00.09.08q.003 OR openssl.OPENSSL-INC version is less than A.00.09.08q.003 OR openssl.OPENSSL-LIB version is less than A.00.09.08q.003 OR openssl.OPENSSL-MAN version is less than A.00.09.08q.003 OR openssl.OPENSSL-MIS version is less than A.00.09.08q.003 OR openssl.OPENSSL-PRNG version is less than A.00.09.08q.003 OR openssl.OPENSSL-PVT version is less than A.00.09.08q.003 OR openssl.OPENSSL-RUN version is less than A.00.09.08q.003 OR openssl.OPENSSL-SRC version is less than A.00.09.08q.003
BACK