{"id":"CVE-2005-2969","aliases":["DEBIAN-CVE-2005-2969","DSA-875-1","DSA-881-1","DSA-882-1","DSA-888-1","EUVD-2005-2969","GHSA-h7wj-q4wv-chfq","RHSA-2005:800","RHSA-2008:0264","RHSA-2008:0525","RHSA-2008:0629"],"status":"published","title":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when...","description":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04866,"percentile":0.92095,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2005-10-18T04:00:00Z","modified":"2026-10-23T03:47:42Z","fixes":[{"ecosystem":"Debian:12","package":"openssl","fixed_in":["0.9.8-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["0.9.8-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["0.9.8-3"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"openssl094","fixed_in":["0.9.4-6.woody.4"],"sources":["osv"]},{"ecosystem":"Debian:3.1","package":"openssl096","fixed_in":["0.9.6m-1sarge1"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"openssl095","fixed_in":["0.9.5a-6.woody.6"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"openssl","fixed_in":["0.9.6c-2.woody.8"],"sources":["osv"]},{"ecosystem":"Debian:3.1","package":"openssl","fixed_in":["0.9.7e-3sarge1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-3"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"openssl094","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.4-6.woody.4"}]}],"versions":["0.9.4-6","0.9.4-6.potato.3","0.9.4-6.woody.3"]},{"source":"osv","ecosystem":"Debian:3.1","package":"openssl096","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6m-1sarge1"}]}],"versions":["0.9.6m-1"]},{"source":"osv","ecosystem":"Debian:3.0","package":"openssl095","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.5a-6.woody.6"}]}],"versions":["0.9.5a-6.woody.3","0.9.5a-6.woody.5"]},{"source":"osv","ecosystem":"Debian:3.0","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6c-2.woody.8"}]}],"versions":["0.9.6c-2.woody.7"]},{"source":"osv","ecosystem":"Debian:3.1","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.7e-3sarge1"}]}],"versions":["0.9.7e-3"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl096b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-16.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openssl096b-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-16.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl096b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-16.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openssl096b-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-16.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl096b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-16.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openssl096b-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-16.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-33.17"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl096b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-16.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openssl096b-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-16.22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl096b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openssl096b-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl096b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openssl096b-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl096b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openssl096b-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7a-43.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl096b","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openssl096b-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.6b-22.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.0:el4","package":"rhn-solaris-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.0:el4","package":"rhn_solaris_bootstrap_5_0_2_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:4.2::el3","package":"rhn-solaris-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:4.2::el3","package":"rhn_solaris_bootstrap_5_0_2_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:4.2::el4","package":"rhn-solaris-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:4.2::el4","package":"rhn_solaris_bootstrap_5_0_2_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.1::el4","package":"rhn-solaris-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.1-3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.1::el4","package":"rhn_solaris_bootstrap_5_1_1_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-0"}]}],"bundled":12}],"products":[{"vendor":"openssl","product":"openssl"}],"references":[{"url":"http://secunia.com/advisories/17259","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/23915","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_61_openssl.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/26893","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17389","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/3056","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/2457","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/17813","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/15071","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://secunia.com/advisories/18165","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/23340","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/18123","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2005/dsa-881","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2005/2659","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/24799","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.debian.org/security/2005/dsa-882","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-response-20051202-openssl.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","web"]},{"url":"http://secunia.com/advisories/17153","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred","web"]},{"url":"http://secunia.com/advisories/17191","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/2908","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://securitytracker.com/id?1015032","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://issues.rpath.com/browse/RPL-1633","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/17344","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/19185","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/2036","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://secunia.com/advisories/17589","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/2710","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/3002","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/31492","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17466","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://secunia.com/advisories/17146","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17169","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35287","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2007/0343","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/23280","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=302847","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://secunia.com/advisories/23843","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17189","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/21827","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17288","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdf","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:179","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17632","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0326","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17409","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/25973","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11454","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://secunia.com/advisories/17888","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17210","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2005/dsa-875","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3531","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.openssl.org/news/secadv_20051011.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://secunia.com/advisories/17178","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/17432","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17180","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101974-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/15647","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://secunia.com/advisories/17335","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-762.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-800.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/17151","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/18663","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/17617","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/18045","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2969","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-h7wj-q4wv-chfq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2005-2969","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:800","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=169863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=170036","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_800.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617463","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0109","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2969","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0264","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=235093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=295971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430655","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430659","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0264.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1849","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1849","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1849","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-1542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-1542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1542","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2937","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2937","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2937","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2940","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2940","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2940","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-3738","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3738","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3738","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-4339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4339","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-4343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4343","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-4980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4980","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-2052","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-2052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2052","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-4965","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4965","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4965","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0525","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0525.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0629","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0629.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-2969","description":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.","status":"published","published":"2005-10-18T04:00:00Z","modified":"2024-08-07T22:53:29.946Z","updated_at":"2026-11-02T14:33:37.840038Z"}],"euvd":[{"id":"EUVD-2005-2969","description":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.","status":"published","published":"2005-10-18T04:00:00Z","modified":"2024-08-07T22:53:29Z","updated_at":"2026-11-03T01:15:28.669844Z"}],"ghsa":[{"id":"GHSA-h7wj-q4wv-chfq","title":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when...","description":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.","status":"published","published":"2022-05-03T03:14:22Z","modified":"2023-02-01T05:01:12Z","updated_at":"2026-11-02T14:49:41.113902Z"}],"nvd":[{"id":"CVE-2005-2969","description":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.","status":"published","published":"2005-10-18T21:02:00Z","modified":"2026-06-16T22:15:59.707Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:56.902692Z"}],"osv":[{"id":"CVE-2005-2969","description":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.","status":"published","published":"2005-10-18T21:02:00Z","modified":"2026-04-10T03:37:12.590923Z","updated_at":"2026-11-02T15:43:56.581247Z"},{"id":"DEBIAN-CVE-2005-2969","description":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.","status":"published","published":"2005-10-18T21:02:00Z","modified":"2026-10-23T03:47:42.199180372Z","updated_at":"2026-11-02T15:45:22.831407Z"},{"id":"DSA-875-1","title":"openssl094 - cryptographic weakness","status":"published","published":"2005-10-27T00:00:00Z","modified":"2026-03-09T02:11:09.733029Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"DSA-881-1","title":"openssl096 - cryptographic weakness","status":"published","published":"2005-11-04T00:00:00Z","modified":"2026-03-09T02:09:30.451232Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"DSA-882-1","title":"openssl095 - cryptographic weakness","status":"published","published":"2005-11-04T00:00:00Z","modified":"2026-03-09T02:11:00.370831Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"DSA-888-1","title":"openssl - cryptographic weakness","status":"published","published":"2005-11-07T00:00:00Z","modified":"2026-03-09T02:10:13.931949Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"RHSA-2005:800","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-11-05T16:34:26Z","modified":"2026-06-26T10:03:51Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2008:0264","title":"Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update","status":"published","published":"2024-09-15T17:19:20Z","modified":"2026-01-14T11:00:41.880457Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2008:0525","title":"Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update","status":"published","published":"2024-09-15T17:19:23Z","modified":"2026-01-14T11:00:44.754158Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2008:0629","title":"Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update","status":"published","published":"2024-09-15T17:19:28Z","modified":"2026-01-14T11:00:45.350883Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}