CVE-2002-0655

2002-08-1204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

openssl

cve-2002-0655

ascii representations

integers mishandling

denial of service

arbitrary code execution

nvd

6.9 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.3%

JSON

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.

CPENameOperatorVersion
oracle:http_serveroracle http servereq9.0.1
oracle:corporate_time_outlook_connectororacle corporate time outlook connectoreq3.1
oracle:corporate_time_outlook_connectororacle corporate time outlook connectoreq3.1.2
openssl:opensslopenssleq0.9.3
openssl:opensslopenssleq0.9.7
oracle:application_serveroracle application servereq*
openssl:opensslopenssleq0.9.6d
openssl:opensslopenssleq0.9.1c
openssl:opensslopenssleq0.9.6
openssl:opensslopenssleq0.9.6a

CPE	Name	Operator	Version
oracle:http_server	oracle http server	eq	9.0.1
oracle:corporate_time_outlook_connector	oracle corporate time outlook connector	eq	3.1
oracle:corporate_time_outlook_connector	oracle corporate time outlook connector	eq	3.1.2
openssl:openssl	openssl	eq	0.9.3
openssl:openssl	openssl	eq	0.9.7
oracle:application_server	oracle application server	eq	*
openssl:openssl	openssl	eq	0.9.6d
openssl:openssl	openssl	eq	0.9.1c
openssl:openssl	openssl	eq	0.9.6
openssl:openssl	openssl	eq	0.9.6a