2nd try : REGD : openssl vulnerability CVE-2010-2939 : double in ssl3_get_key_exchange

2010-09-23 Thread Aparajita Sood (apsood)
Would be great if I can get answers to the below questions thanks aparajita From: Aparajita Sood (apsood) Sent: Tuesday, September 21, 2010 11:54 AM To: 'openssl-users@openssl.org' Subject: REGD : openssl vulnerability CVE-2010-2939 : double in ssl3_get_key_exchange Hi OpenSSL Fo

REGD : openssl vulnerability CVE-2010-2939 : double in ssl3_get_key_exchange

2010-09-22 Thread Aparajita Sood (apsood)
Hi OpenSSL Folks, I'm evaluating our product for this vulnerability. http://www.mail-archive.com/openssl-...@openssl.org/msg28049.html I have a few questions : 1. The vulnerability says > "You are right : there is a double f