The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING…

Description

The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.

Scores

EPSS (exploitation in 30 days)

4.9% · top 7.9% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (73)

• 17259 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 23915 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SUSE-SA:2005:061 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• 26893 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17389 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2005-3056 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• ADV-2007-2457 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
• 17813 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 15071 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 18165 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 23340 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 18123 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• DSA-881 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754 (opens in a new tab)x_refsource_MISCx_transferred
• http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• ADV-2005-2659 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 24799 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• DSA-882 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• 20051202 Cisco Security Notice: Response to OpenSSL - Potential SSL 2.0 Rollback (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
• 17153 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SSRT071299 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• TSLSA-2005-0059 (opens in a new tab)vendor-advisoryx_refsource_TRUSTIXx_transferred
• 17191 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2005-2908 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 1015032 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• https://issues.rpath.com/browse/RPL-1633 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 17344 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 19185 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2005-2036 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt (opens in a new tab)x_refsource_MISCx_transferred
• 17589 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2005-2710 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• ADV-2005-3002 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 31492 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17466 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• RHSA-2008:0629 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 17146 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17169 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• hitachi-hicommand-security-bypass(35287) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• ADV-2007-0343 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
• 23280 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• APPLE-SA-2005-11-29 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• 23843 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17189 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 21827 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17288 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• MDKSA-2005:179 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• 17632 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2007-0326 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 17409 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 25973 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• oval:org.mitre.oval:def:11454 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• 17888 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17210 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• DSA-875 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• ADV-2006-3531 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://www.openssl.org/news/secadv_20051011.txt (opens in a new tab)x_refsource_CONFIRMx_transferred
• 17178 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• HPSBUX02174 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 17432 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17180 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 101974 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
• 15647 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 17335 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• RHSA-2005:762 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2005:800 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 17151 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 18663 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17617 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 18045 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2005-2969](https://trackcve.app/badge/CVE-2005-2969.svg)](https://trackcve.app/cve/CVE-2005-2969)

Record last updated 7 Aug 2024, 22:53 UTC.