Description
The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of service via malformed ASN.1 objects.
References
- http://jvn.jp/cert/JVNVU%23754281/index.html
- 25364 third-party-advisory
- ADV-2007-1945 vdb-entry
- 25343 third-party-advisory
- oval:org.mitre.oval:def:5778 vdb-entry signature
- ADV-2007-1909 vdb-entry
- 20070522 Vulnerability In Crypto Library vendor-advisory
- 24104 vdb-entry
- VU#754281 third-party-advisory
- ADV-2007-1908 vdb-entry
- 25399 third-party-advisory
- 1018095 vdb-entry
- https://secure-support.novell.com/KanisaPlatform/Publishing/97/3590033_f.SAL_Public.html
- 35338 vdb-entry
- multiple-crypto-asn1-dos(34430) vdb-entry