The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
CVSS v2.0 Score
5.0
/ 10.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
Information
- Published
- 12 août 2002
- Updated
- 16 avr. 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
openssl opensslAll OpenSSL CVEs →
Versions : 0.9.1c, 0.9.2b, 0.9.3, 0.9.4, 0.9.5
oracle application server
Versions : 1.0.2, 1.0.2.1s, 1.0.2.2
oracle corporate time outlook connector
Versions : 3.1, 3.1.1, 3.1.2, 3.3
oracle http serverAll Apache HTTP Server CVEs →
Versions : 9.0.1, 9.2.0
apple mac os x
Versions : 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4
Weaknesses (CWE)
NVD-CWE-Other
References (22)
- http://www.cert.org/advisories/CA-2002-23.htmlUS Government Resource
- http://www.kb.cert.org/vuls/id/748355US Government Resource
- + 7 more references on NVD
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.