CVE-2002-0659

2002-08-1204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

openssl

asn1

library

remote attackers

denial of service

invalid encodings

vulnerability

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.066 Low

EPSS

Percentile

93.8%

JSON

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.

CPENameOperatorVersion
oracle:http_serveroracle http servereq9.0.1
oracle:corporate_time_outlook_connectororacle corporate time outlook connectoreq3.1
oracle:corporate_time_outlook_connectororacle corporate time outlook connectoreq3.1.2
openssl:opensslopenssleq0.9.3
openssl:opensslopenssleq0.9.7
oracle:application_serveroracle application servereq*
openssl:opensslopenssleq0.9.6d
openssl:opensslopenssleq0.9.1c
openssl:opensslopenssleq0.9.6
openssl:opensslopenssleq0.9.6a

CPE	Name	Operator	Version
oracle:http_server	oracle http server	eq	9.0.1
oracle:corporate_time_outlook_connector	oracle corporate time outlook connector	eq	3.1
oracle:corporate_time_outlook_connector	oracle corporate time outlook connector	eq	3.1.2
openssl:openssl	openssl	eq	0.9.3
openssl:openssl	openssl	eq	0.9.7
oracle:application_server	oracle application server	eq	*
openssl:openssl	openssl	eq	0.9.6d
openssl:openssl	openssl	eq	0.9.1c
openssl:openssl	openssl	eq	0.9.6
openssl:openssl	openssl	eq	0.9.6a