Back
CVE-2005-2969
The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING…
Medium5.0EPSS 4.9%
- Published
- Updated
- Reserved
- Assigned by
- redhat
Description
The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.
Timeline
ID reserved
By redhat
- 29 days later
· 29 days later
Published
- 19 years later
· 19 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium5.0 | AV:N/AC:L/Au:N/C:N/I:P/A:N |
- EPSS (exploitation in 30 days)
- 4.9% · top 7.9% of all CVEs (9 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (73)
- 17259 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 23915 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- SUSE-SA:2005:061 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- 26893 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 17389 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- ADV-2005-3056 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- ADV-2007-2457 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
- 17813 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 15071 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 18165 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 23340 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 18123 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- DSA-881 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754 (opens in a new tab)x_refsource_MISCx_transferred
- http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- ADV-2005-2659 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 24799 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- DSA-882 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- 20051202 Cisco Security Notice: Response to OpenSSL - Potential SSL 2.0 Rollback (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
- 17153 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- SSRT071299 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
- TSLSA-2005-0059 (opens in a new tab)vendor-advisoryx_refsource_TRUSTIXx_transferred
- 17191 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- ADV-2005-2908 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 1015032 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- https://issues.rpath.com/browse/RPL-1633 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 17344 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 19185 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- ADV-2005-2036 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt (opens in a new tab)x_refsource_MISCx_transferred
- 17589 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- ADV-2005-2710 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- ADV-2005-3002 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 31492 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 17466 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- RHSA-2008:0629 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- 17146 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 17169 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- hitachi-hicommand-security-bypass(35287) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- ADV-2007-0343 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
- 23280 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- APPLE-SA-2005-11-29 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
- 23843 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 17189 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 21827 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 17288 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- MDKSA-2005:179 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
- 17632 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- ADV-2007-0326 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 17409 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 25973 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- oval:org.mitre.oval:def:11454 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
- 17888 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 17210 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- DSA-875 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- ADV-2006-3531 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- http://www.openssl.org/news/secadv_20051011.txt (opens in a new tab)x_refsource_CONFIRMx_transferred
- 17178 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- HPSBUX02174 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
- http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- 17432 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 17180 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 101974 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
- 15647 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 17335 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- RHSA-2005:762 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2005:800 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- 17151 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 18663 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 17617 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 18045 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2005-2969 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2005-2969)Record last updated .