Signature Detail

SSL: DTLS Denial of Service

This signature detects attempts to exploit a known vulnerability against OpenSSL DTLS. A successful attack can result in a denial-of-service condition.

Extended Description

OpenSSL is prone to a denial-of-service vulnerability caused by a NULL-pointer dereference condition. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Versions prior to OpenSSL 0.9.8i are vulnerable.

Affected Products

• Avaya Aura Session Manager 1.1
• Avaya Voice Portal 5.0
• Avaya Voice Portal 5.0 SP1
• HP System Management Homepage 6.0.0.95
• HP System Management Homepage 6.0.0.96
• Mandriva Corporate Server 3.0.0
• Mandriva Corporate Server 3.0.0 X86 64
• Mandriva Corporate Server 4.0
• Mandriva Corporate Server 4.0.0 X86 64
• Mandriva Enterprise Server 5
• Mandriva Enterprise Server 5 X86 64
• Mandriva Linux Mandrake 2008.0
• Mandriva Linux Mandrake 2008.0 X86 64
• Mandriva Linux Mandrake 2008.1
• Mandriva Linux Mandrake 2008.1 X86 64
• Mandriva Linux Mandrake 2009.0
• Mandriva Linux Mandrake 2009.0 X86 64
• Mandriva Multi Network Firewall 2.0.0
• NetBSD 4.0
• NetBSD 4.0.1
• NetBSD 4.0.2
• NetBSD 4,0 Beta
• NetBSD 4.0 BETA2
• NetBSD 5.0
• NetBSD 5.0 RC3
• OpenSSL Project OpenSSL 0.9.6
• OpenSSL Project OpenSSL 0.9.6 A
• OpenSSL Project OpenSSL 0.9.6 B
• OpenSSL Project OpenSSL 0.9.6 B-36.8
• OpenSSL Project OpenSSL 0.9.6 C
• OpenSSL Project OpenSSL 0.9.6 D
• OpenSSL Project OpenSSL 0.9.6 E
• OpenSSL Project OpenSSL 0.9.6 F
• OpenSSL Project OpenSSL 0.9.6 G
• OpenSSL Project OpenSSL 0.9.6 H
• OpenSSL Project OpenSSL 0.9.6 I
• OpenSSL Project OpenSSL 0.9.6 J
• OpenSSL Project OpenSSL 0.9.6 K
• OpenSSL Project OpenSSL 0.9.6 L
• OpenSSL Project OpenSSL 0.9.6 M
• OpenSSL Project OpenSSL 0.9.7
• OpenSSL Project OpenSSL 0.9.7 A
• OpenSSL Project OpenSSL 0.9.7 B
• OpenSSL Project OpenSSL 0.9.7 Beta1
• OpenSSL Project OpenSSL 0.9.7 Beta2
• OpenSSL Project OpenSSL 0.9.7 Beta3
• OpenSSL Project OpenSSL 0.9.7 C
• OpenSSL Project OpenSSL 0.9.7 D
• OpenSSL Project OpenSSL 0.9.7 E
• OpenSSL Project OpenSSL 0.9.7 F
• OpenSSL Project OpenSSL 0.9.7 G
• OpenSSL Project OpenSSL 0.9.7 H
• OpenSSL Project OpenSSL 0.9.7 I
• OpenSSL Project OpenSSL 0.9.7 J
• OpenSSL Project OpenSSL 0.9.7 K
• OpenSSL Project OpenSSL 0.9.7 L
• OpenSSL Project OpenSSL 0.9.7 M
• OpenSSL Project OpenSSL 0.9.8
• OpenSSL Project OpenSSL 0.9.8 A
• OpenSSL Project OpenSSL 0.9.8 B
• OpenSSL Project OpenSSL 0.9.8 C
• OpenSSL Project OpenSSL 0.9.8 D
• OpenSSL Project OpenSSL 0.9.8 E
• OpenSSL Project OpenSSL 0.9.8F
• OpenSSL Project OpenSSL 0.9.8 F
• OpenSSL Project OpenSSL 0.9.8G
• OpenSSL Project OpenSSL 0.9.8H
• Red Hat Enterprise Linux 5 Server
• Red Hat Enterprise Linux Desktop 5 Client
• Red Hat Enterprise Linux Desktop Workstation 5 Client
• SuSE openSUSE 10.3
• SuSE openSUSE 11.0
• SuSE openSUSE 11.1
• SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO
• SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO
• SuSE SUSE Linux Enterprise Desktop 10
• SuSE SUSE Linux Enterprise Desktop 10 SP1
• SuSE SUSE Linux Enterprise Desktop 10 SP2
• SuSE SUSE Linux Enterprise Server 10
• SuSE SUSE Linux Enterprise Server 10 SP1
• SuSE SUSE Linux Enterprise Server 10 SP2
• SuSE SUSE Linux Enterprise Server 11
• SuSE SUSE Linux Enterprise Server 9
• SuSE SUSE Linux Enterprise Server 9 SP3
• SuSE SUSE Linux Enterprise Server RT Solution 10
• Ubuntu Ubuntu Linux 6.06 LTS Amd64
• Ubuntu Ubuntu Linux 6.06 LTS I386
• Ubuntu Ubuntu Linux 6.06 LTS Powerpc
• Ubuntu Ubuntu Linux 6.06 LTS Sparc
• Ubuntu Ubuntu Linux 8.04 LTS Amd64
• Ubuntu Ubuntu Linux 8.04 LTS I386
• Ubuntu Ubuntu Linux 8.04 LTS Lpia
• Ubuntu Ubuntu Linux 8.04 LTS Powerpc
• Ubuntu Ubuntu Linux 8.04 LTS Sparc
• Ubuntu Ubuntu Linux 8.10 Amd64
• Ubuntu Ubuntu Linux 8.10 I386
• Ubuntu Ubuntu Linux 8.10 Lpia
• Ubuntu Ubuntu Linux 8.10 Powerpc
• Ubuntu Ubuntu Linux 8.10 Sparc
• Ubuntu Ubuntu Linux 9.04 Amd64
• Ubuntu Ubuntu Linux 9.04 I386
• Ubuntu Ubuntu Linux 9.04 Lpia
• Ubuntu Ubuntu Linux 9.04 Powerpc
• Ubuntu Ubuntu Linux 9.04 Sparc
• VMWare ESX Server 4.0
• VMWare vMA 4.0

References

• BugTraq: 35174
• CVE: CVE-2009-1386