Re: exploit code targeting OpenSSL and Mod_SSL ?

["Geoffroy Raimbault" <graimbault () lynx-technologies com>]

Take a look at this page :

http://lists.netsys.com/pipermail/full-disclosure/2002-September/001913.html

It's an exploit for the KEY_ARG heap overflow in mod_ssl under Apache
written by Solar Eclipse.

It is provided with a good documentation on how to exploit the
vulnerability.

Regards,

Geoffroy Raimbault
Information Security Consultant
http://www.lynx-technologies.com


----- Original Message -----
From: "John" <johnccosta () yahoo ca>
To: <vuln-dev () securityfocus com>
Sent: Tuesday, April 15, 2003 4:18 AM
Subject: exploit code targeting OpenSSL and Mod_SSL ?


> Is anyone aware of the existence of exploit code in the
> wild that is currently targeting OpenSSL and Mod_SSL
> vulnerabilities?
>
> Tx
> John