Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ssldump PreMasterSecret远程缓冲区溢出漏洞
Vulnerability Description
ssldump是一款SSLv3/TLS网络协议分析程序，能够加密连接和显示应用程序数据通信。 ssldump在解密PreMasterSecret时缺少正确检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击。 ssldump会尝试把PreMasterSecret解密到48字节的缓冲区中，这是合法RSA PreMasterSecret值的最大长度，通过使用超长的PMS值可导致产生缓冲区溢出。这个缓冲区溢出的缓冲区定义长度取决于RSA密钥的最大长度，因此如果RSA密钥长度为1024位的情况下，缓冲区长度将为64
CVSS Information
N/A
Vulnerability Type
N/A