OpenSSL Anonymous ECDH Handshake NULL Pointer Dereference

This strike exploits a NULL pointer dereference vulnerability in OpenSSL versions prior to 0.9.8za, 1.0.0m, 1.0.1h. The problem is triggered when using anonymous ECDH cipher suites. A remote attacker could exploit this by impersonating a legal server and responding to a target client with a malicious handshake sequence. The vulnerable application will then terminate due to illegal memory access.