Denial of Service Vulnerability in OpenSSL ASN1 Library
CVE-2002-0659

Currently unrated

Key Information:

Vendor

Oracle
Status
Http Server
Corporate Time Outlook Connector
OpenSSL
Application Server
Vendor
CVE Published:
12 August 2002

What is CVE-2002-0659?

The ASN1 library within the OpenSSL cryptographic software allows remote attackers to trigger a denial of service through the submission of invalid encodings. This vulnerability is present in OpenSSL version 0.9.6d and earlier, as well as 0.9.7-beta2 and earlier versions, potentially leading to significant disruption in service availability.

References

http://rhn.redhat.com/errata/RHSA-2002-164.html
vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2002-161.html
vendor-advisoryx_refsource_REDHAT
http://www.kb.cert.org/vuls/id/748355
third-party-advisoryx_refsource_CERT-VN

EPSS Score

12% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.