http://cvs.openssl.org/chngview?cn=20131

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052315.html

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html

http://marc.info/?l=bugtraq&m=129916880600544&w=2

http://marc.info/?l=bugtraq&m=129916880600544&w=2

http://marc.info/?l=bugtraq&m=130497251507577&w=2

http://marc.info/?l=bugtraq&m=130497251507577&w=2

http://marc.info/?l=bugtraq&m=132077688910227&w=2

http://marc.info/?l=bugtraq&m=132077688910227&w=2

http://openssl.org/news/secadv_20101202.txt

http://osvdb.org/69565

http://secunia.com/advisories/42469

http://secunia.com/advisories/42473

http://secunia.com/advisories/42493

http://secunia.com/advisories/42571

http://secunia.com/advisories/42620

http://secunia.com/advisories/42811

http://secunia.com/advisories/42877

http://secunia.com/advisories/43169

http://secunia.com/advisories/43170

http://secunia.com/advisories/43171

http://secunia.com/advisories/43172

http://secunia.com/advisories/43173

http://secunia.com/advisories/44269

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471

http://support.apple.com/kb/HT4723

http://ubuntu.com/usn/usn-1029-1

http://www.debian.org/security/2011/dsa-2141

http://www.kb.cert.org/vuls/id/737740

http://www.mandriva.com/security/advisories?name=MDVSA-2010:248

http://www.redhat.com/support/errata/RHSA-2010-0977.html

http://www.redhat.com/support/errata/RHSA-2010-0978.html

http://www.redhat.com/support/errata/RHSA-2010-0979.html

http://www.redhat.com/support/errata/RHSA-2011-0896.html

http://www.securityfocus.com/archive/1/522176

http://www.securityfocus.com/archive/1/522176

http://www.securityfocus.com/bid/45164

http://www.securitytracker.com/id?1024822

http://www.vupen.com/english/advisories/2010/3120

http://www.vupen.com/english/advisories/2010/3122

http://www.vupen.com/english/advisories/2010/3134

http://www.vupen.com/english/advisories/2010/3188

http://www.vupen.com/english/advisories/2011/0032

http://www.vupen.com/english/advisories/2011/0076

http://www.vupen.com/english/advisories/2011/0268

https://bugzilla.redhat.com/show_bug.cgi?id=659462

https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910

NIST NVD-CWE-noinfo

NIST NVD-CWE-Other

OR
     *cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*
     *cpe:2.3:a:o

OR
     *cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* versions up to (excluding) 0.9.8q
     *cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* versions from (including) 1.0.0 up to (excluding) 1.0.0c

OR
     *cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*
     *cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:* versions up to (excluding) 0.9.2

OR
     *cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_ente

http://cvs.openssl.org/chngview?cn=20131 Patch

http://cvs.openssl.org/chngview?cn=20131 Broken Link, Patch

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 No Types Assigned

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 Broken Link

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html No Types Assigned

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html Broken Link, Mailing List, Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html Mailing List, Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052315.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052315.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html Mailing List, Third Party Advisory

http://marc.info/?l=bugtraq&m=129916880600544&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=129916880600544&w=2 Issue Tracking, Third Party Advisory

http://marc.info/?l=bugtraq&m=130497251507577&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=130497251507577&w=2 Issue Tracking, Third Party Advisory

http://marc.info/?l=bugtraq&m=132077688910227&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=132077688910227&w=2 Issue Tracking, Third Party Advisory

http://openssl.org/news/secadv_20101202.txt Patch

http://openssl.org/news/secadv_20101202.txt Patch, Third Party Advisory

http://osvdb.org/69565 No Types Assigned

http://osvdb.org/69565 Broken Link

http://secunia.com/advisories/42469 Vendor Advisory

http://secunia.com/advisories/42469 Not Applicable

http://secunia.com/advisories/42473 Vendor Advisory

http://secunia.com/advisories/42473 Not Applicable

http://secunia.com/advisories/42493 Vendor Advisory

http://secunia.com/advisories/42493 Not Applicable

http://secunia.com/advisories/42571 Vendor Advisory

http://secunia.com/advisories/42571 Not Applicable

http://secunia.com/advisories/42620 Vendor Advisory

http://secunia.com/advisories/42620 Not Applicable

http://secunia.com/advisories/42811 Vendor Advisory

http://secunia.com/advisories/42811 Not Applicable

http://secunia.com/advisories/42877 Vendor Advisory

http://secunia.com/advisories/42877 Not Applicable

http://secunia.com/advisories/43169 Vendor Advisory

http://secunia.com/advisories/43169 Not Applicable

http://secunia.com/advisories/43170 Vendor Advisory

http://secunia.com/advisories/43170 Not Applicable

http://secunia.com/advisories/43171 Vendor Advisory

http://secunia.com/advisories/43171 Not Applicable

http://secunia.com/advisories/43172 Vendor Advisory

http://secunia.com/advisories/43172 Not Applicable

http://secunia.com/advisories/43173 Vendor Advisory

http://secunia.com/advisories/43173 Not Applicable

http://secunia.com/advisories/44269 Vendor Advisory

http://secunia.com/advisories/44269 Not Applicable

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471 No Types Assigned

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471 Third Party Advisory

http://support.apple.com/kb/HT4723 No Types Assigned

http://support.apple.com/kb/HT4723 Third Party Advisory

http://ubuntu.com/usn/usn-1029-1 No Types Assigned

http://ubuntu.com/usn/usn-1029-1 Third Party Advisory

http://www.debian.org/security/2011/dsa-2141 No Types Assigned

http://www.debian.org/security/2011/dsa-2141 Third Party Advisory

http://www.kb.cert.org/vuls/id/737740 US Government Resource

http://www.kb.cert.org/vuls/id/737740 Third Party Advisory, US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2010:248 No Types Assigned

http://www.mandriva.com/security/advisories?name=MDVSA-2010:248 Permissions Required

http://www.redhat.com/support/errata/RHSA-2010-0977.html Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2010-0977.html Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0978.html Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2010-0978.html Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0979.html No Types Assigned

http://www.redhat.com/support/errata/RHSA-2010-0979.html Third Party Advisory

http://www.securityfocus.com/archive/1/522176 No Types Assigned

http://www.securityfocus.com/archive/1/522176 Third Party Advisory, VDB Entry

http://www.securityfocus.com/bid/45164 No Types Assigned

http://www.securityfocus.com/bid/45164 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id?1024822 No Types Assigned

http://www.securitytracker.com/id?1024822 Broken Link, Third Party Advisory, VDB Entry

http://www.vupen.com/english/advisories/2010/3120 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3120 Permissions Required

http://www.vupen.com/english/advisories/2010/3122 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3122 Permissions Required

http://www.vupen.com/english/advisories/2010/3134 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3134 Permissions Required

http://www.vupen.com/english/advisories/2010/3188 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3188 Permissions Required

http://www.vupen.com/english/advisories/2011/0032 Vendor Advisory

http://www.vupen.com/english/advisories/2011/0032 Permissions Required

http://www.vupen.com/english/advisories/2011/0076 Vendor Advisory

http://www.vupen.com/english/advisories/2011/0076 Permissions Required

http://www.vupen.com/english/advisories/2011/0268 Vendor Advisory

http://www.vupen.com/english/advisories/2011/0268 Permissions Required

https://bugzilla.redhat.com/show_bug.cgi?id=659462 Patch

https://bugzilla.redhat.com/show_bug.cgi?id=659462 Issue Tracking, Patch, Third Party Advisory

https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST No Types Assigned

https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910 No Types Assigned

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910 Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:18910 [No Types Assigned]

OpenSSL en versiones anteriores a 0.9.8q y 1.0.x en versiones anteriores a 1.0.0c, cuando SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG está habilitado, no previene adecuadamente la modificación del conjunto de cifrado en la caché de sesión, lo que permite a atacantes remotos forzar la degradación para un cifrado no destinado a través de vectores que involucran rastreo de tráfico de red para descubrir un identificador de sesión.

OpenSSL en versiones anteriores a la 0.9.8q, y 1.0.x anteriores a la 1.0.0c, si SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG está activado, no previene apropiadamente la modificación de los datos que se encuentran en la caché de sesión, lo que permite a atacantes remotos forzar el uso de protocolos de encriptación no previstos a través de vectores que involucran la captura de tráfico de red para descubrir un identificador de sesión.

http://marc.info/?l=bugtraq&m=129916880600544&w=2

http://marc.info/?l=bugtraq&m=130497251507577&w=2