CVE-2005-2969— OpenSSL不安全的协议协商漏洞

EPSS 9.39% · P93 更新日 2026-02-27

新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2005-2969の基本情報

脆弱性情報

脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！

Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル

N/A

ソース: NVD (National Vulnerability Database)

脆弱性説明

The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.

ソース: NVD (National Vulnerability Database)

CVSS情報

N/A

ソース: NVD (National Vulnerability Database)

脆弱性タイプ

N/A

ソース: NVD (National Vulnerability Database)

脆弱性タイトル

OpenSSL不安全的协议协商漏洞

ソース: CNNVD (China National Vulnerability Database)

脆弱性説明

OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。为了能与Microsoft Internet Explorer 3.02完全兼容，可以在OpenSSL中使用SL_OP_MSIE_SSLV2_RSA_PADDING选项禁用安全套接字层协议所需的验证步骤。常用的SSL_OP_ALL选项中包含有上述选项。如果使用OpenSSL的应用服务器启用了SSL_OP_MS

ソース: CNNVD (China National Vulnerability Database)

CVSS情報

N/A

ソース: CNNVD (China National Vulnerability Database)

脆弱性タイプ

N/A

ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダー	プロダクト	影響を受けるバージョン	CPE	購読
-	n/a	n/a	-

II. CVE-2005-2969の公開POC

#	POC説明	ソースリンク	Shenlongリンク

AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2005-2969のインテリジェンス情報

お願いしますログインより多くのインテリジェンス情報を見る

http://www.openssl.org/news/secadv_20051011.txtx_refsource_CONFIRM
https://issues.rpath.com/browse/RPL-1633x_refsource_CONFIRM
http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754x_refsource_MISC
http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txtx_refsource_MISC
ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdfx_refsource_MISC
http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.htmlx_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2006-031.htmx_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2006-260.htmx_refsource_CONFIRM
http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.htmlx_refsource_CONFIRM
http://secunia.com/advisories/17288third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18165third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26893third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25973third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17389third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17259third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17210third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19185third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17888third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17632third-party-advisoryx_refsource_SECUNIA
About Secunia Research | Flexerathird-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23280third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17151third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17178third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/31492third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17180third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17344third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/15647vdb-entryx_refsource_BID
http://secunia.com/advisories/17191third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/24799vdb-entryx_refsource_BID
http://secunia.com/advisories/17189third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17146third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18045third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23340third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23915third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17153third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18663third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/15071vdb-entryx_refsource_BID
http://secunia.com/advisories/17409third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18123third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21827third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17432third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17335third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17169third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17466third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17617third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23843third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17813third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101974-1vendor-advisoryx_refsource_SUNALERT
http://securitytracker.com/id?1015032vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2005/dsa-881vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2005/dsa-882vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2005/dsa-875vendor-advisoryx_refsource_DEBIAN
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540vendor-advisoryx_refsource_HP
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100vendor-advisoryx_refsource_HP
http://www.vupen.com/english/advisories/2005/2908vdb-entryx_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2005-762.htmlvendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2005/3002vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2007/0343vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/3531vdb-entryx_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2005-800.htmlvendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2005/3056vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2005/2659vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2007/0326vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2005/2036vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2007/2457vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2005/2710vdb-entryx_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2008-0629.htmlvendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDKSA-2005:179vendor-advisoryx_refsource_MANDRIVA
http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.htmlvendor-advisoryx_refsource_TRUSTIX
http://www.novell.com/linux/security/advisories/2005_61_openssl.htmlvendor-advisoryx_refsource_SUSE
http://docs.info.apple.com/article.html?artnum=302847vendor-advisoryx_refsource_APPLE
https://exchange.xforce.ibmcloud.com/vulnerabilities/35287vdb-entryx_refsource_XF
http://www.cisco.com/warp/public/707/cisco-response-20051202-openssl.shtmlvendor-advisoryx_refsource_CISCO
https://nvd.nist.gov/vuln/detail/CVE-2005-2969

Same Patch Batch · n/a · 2005-10-18 · 7 CVEs total

CVE-2005-2978		NetPBM PNMToPNG缓冲区溢出漏洞
CVE-2005-3252		Snort Back Orifice预处理器远程栈溢出漏洞
CVE-2005-3254		Debian CGIwrap program UID设置漏洞
CVE-2005-3255		Debian GNU/Linux cgiwrap包敏感信息泄露漏洞
CVE-2005-3256		Mozilla Enigmail不正确加密密钥选择漏洞
CVE-2005-3257		Linux Kernel控制台键盘映射本地命令注入漏洞

IV. 関連脆弱性

同じ製品: n/a

同じベンダー: n/a

V. CVE-2005-2969へのコメント

まだコメントはありません

目標達成すべての支援者に感謝 — 100%達成しました！

CVE-2005-2969— OpenSSL不安全的协议协商漏洞

I. CVE-2005-2969の基本情報

脆弱性情報

脆弱性タイトル

脆弱性説明

CVSS情報

脆弱性タイプ

脆弱性タイトル

脆弱性説明

CVSS情報

脆弱性タイプ

影響を受ける製品

II. CVE-2005-2969の公開POC

III. CVE-2005-2969のインテリジェンス情報

Same Patch Batch · n/a · 2005-10-18 · 7 CVEs total

IV. 関連脆弱性

V. CVE-2005-2969へのコメント

コメントを残す

目標達成 すべての支援者に感謝 — 100%達成しました！

CVE-2005-2969— OpenSSL不安全的协议协商漏洞

I. CVE-2005-2969の基本情報

脆弱性情報

脆弱性タイトル

脆弱性説明

CVSS情報

脆弱性タイプ

脆弱性タイトル

脆弱性説明

CVSS情報

脆弱性タイプ

影響を受ける製品

II. CVE-2005-2969の公開POC

III. CVE-2005-2969のインテリジェンス情報

Same Patch Batch · n/a · 2005-10-18 · 7 CVEs total

IV. 関連脆弱性

V. CVE-2005-2969へのコメント

コメントを残す

目標達成すべての支援者に感謝 — 100%達成しました！