Unscored CVE-2005-1247 EUVD-2005-1250GHSA-2v5j-pf93-x5xr

webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client…

Published Apr 25, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability.

References

20040115 OpenSSL ASN.1 parsing bugs PoC / brute forcer mailing-list
20050424 [CIRT.DK - Advisory] Novell Nsure Audit 1.0.1 Denial of Service mailing-list
http://www.cirt.dk/advisories/cirt-31-advisory.pdf
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm