Vulnerabilities > CVE-1999-0428 - Remote Security vulnerability in SSLeay

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
openssl
ssleay
nessus
NVD
Published: 1999-03-22
Updated: 2008-09-09

Summary

OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.

Vulnerable Configurations

Part Description Count
Application
Openssl
1
Application
Ssleay
1

Nessus

NASL familyWeb Servers
NASL idOPENSSL_0_9_2B.NASL
descriptionAccording to its banner, the remote server is running a version of OpenSSL that is earlier than 0.9.2b. A remote attacker could reuse an SSL session under a different context and bypass access control mechanisms based on client certificates.
last seen2020-06-01
modified2020-06-02
plugin id17798
published2012-01-12
reporterThis script is Copyright (C) 2012-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/17798
titleOpenSSL < 0.9.2b Session Reuse

References