CVE-2006-0645 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-0645
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-0645

Description: Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/24606 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-251-1 TRUSTIX http://www.trustix.org/errata/2006/0008 ST 1015612 SREASON http://securityreason.com/securityalert/446 SAID Secunia Advisory: SA18794 Secunia Advisory: SA18815 Secunia Advisory: SA18830 Secunia Advisory: SA18832 Secunia Advisory: SA18918 Secunia Advisory: SA18898 Secunia Advisory: SA19080 Secunia Advisory: SA19092 REDHAT http://rhn.redhat.com/errata/RHSA-2006-0207.html OSVDB 23054 MLIST http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001060.html http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001059.html http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001058.html MISC http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch http://www.gleg.net/protover_ssl.shtml MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:039 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200602-08.xml FEDORA http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00043.html DEBIAN http://www.debian.org/security/2006/dsa-986 http://www.debian.org/security/2006/dsa-985 CONFIRM http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/424538/100/0/threaded BID 16568

Return to the previous page.