Summary
generated automatically from NVD dataCVE-2002-0659 is a flaw in the ASN1 library of OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier. Invalid encodings can be sent by a remote attacker to trigger a denial of service. The entry also lists Oracle Application Server, Oracle HTTP Server, and Apple Mac OS X among affected products. It is rated 5.0 (MEDIUM) under CVSS v2.0, with network access, low complexity, and availability impact only.
NVD description
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
EPSS · FIRST.org
36.2%probability of exploitation in the next 30 days
Higher than 98% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-11-02, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 12 août 2002
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (22)
- http://www.cert.org/advisories/CA-2002-23.htmlUS Government Resource
- http://www.kb.cert.org/vuls/id/748355US Government Resource
- + 7 more references on NVD
Similar CVEs
Other vulnerabilities of type
Running OpenSSL? Know which CVEs hit your version.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.