CVE-2002-0656

2002-08-1204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

141

cve

2002

0656

buffer overflow

openssl

remote code execution

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.78 High

EPSS

Percentile

98.2%

JSON

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.

CPENameOperatorVersion
oracle:http_serveroracle http servereq9.0.1
oracle:corporate_time_outlook_connectororacle corporate time outlook connectoreq3.1
oracle:corporate_time_outlook_connectororacle corporate time outlook connectoreq3.1.2
openssl:opensslopenssleq0.9.3
openssl:opensslopenssleq0.9.7
oracle:application_serveroracle application servereq*
openssl:opensslopenssleq0.9.6d
openssl:opensslopenssleq0.9.1c
openssl:opensslopenssleq0.9.6
openssl:opensslopenssleq0.9.6a

CPE	Name	Operator	Version
oracle:http_server	oracle http server	eq	9.0.1
oracle:corporate_time_outlook_connector	oracle corporate time outlook connector	eq	3.1
oracle:corporate_time_outlook_connector	oracle corporate time outlook connector	eq	3.1.2
openssl:openssl	openssl	eq	0.9.3
openssl:openssl	openssl	eq	0.9.7
oracle:application_server	oracle application server	eq	*
openssl:openssl	openssl	eq	0.9.6d
openssl:openssl	openssl	eq	0.9.1c
openssl:openssl	openssl	eq	0.9.6
openssl:openssl	openssl	eq	0.9.6a