Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
DSA-1379-1 | New openssl packages fix arbitrary code execution |
![]() |
DSA-1379-2 | New openssl packages fix arbitrary code execution |
![]() |
USN-522-1 | openssl vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T15:17:28.340Z
Reserved: 2007-09-27T00:00:00
Link: CVE-2007-5135

No data.

Status : Deferred
Published: 2007-09-27T20:17:00.000
Modified: 2025-04-09T00:30:58.490
Link: CVE-2007-5135


No data.