HTTP: OpenSSL CMS Structure OriginatorInfo File Memory Corruption

This signature detects attempts to exploit a known vulnerability in OpenSSL. An attacker can create a malformed CMS file that, if downloaded and used by OpenSSL, can result in arbitrary code execution.

Extended Description

OpenSSL is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue by supplying specially crafted structures to a vulnerable application that uses the affected library. Successfully exploiting this issue can allow the attacker to execute arbitrary code. Failed exploit attempts will result in a denial-of-service condition. Versions of OpenSSL 0.9.h through 0.9.8n and OpenSSL 1.0.x prior to 1.0.0a are affected. NOTE: Cryptographic Message Syntax (CMS) functionality is only enabled by default in OpenSSL versions 1.0.x.

Affected Products

Voodoo_circle circle_xtelnet

References

BugTraq: 40502

CVE: CVE-2010-0742

URL: http://www.openssl.org/news/secadv_20100601.txt

Short Name

HTTP:STC:DL:OPENSSL-CMS-FILE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: OpenSSL CMS Structure OriginatorInfo File Memory Corruption

Extended Description

Affected Products

References

Found a potential security threat?