CVE-2003-0147

🗓️ 18 Mar 2003 05:00:00Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 32 Views

OpenSSL lacks RSA blinding, risking server's private key exposure via timing differences.

Reporter	Title	Published	Views	Family All 45
Tenable Nessus	OpenSSL Private Key Disclosure	18 Aug 200400:00	–	nessus
Tenable Nessus	Debian DSA-288-1 : openssl - several vulnerabilities	29 Sep 200400:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : openssl (MDKSA-2003:035)	31 Jul 200400:00	–	nessus
Tenable Nessus	OpenSSL 0.9.6 < 0.9.6j Multiple Vulnerabilities	7 Jun 202400:00	–	nessus
Tenable Nessus	OpenSSL 0.9.7 < 0.9.7b Multiple Vulnerabilities	7 Jun 202400:00	–	nessus
Tenable Nessus	OpenSSL < 0.9.6j / 0.9.7b Multiple Vulnerabilities	20 Feb 200300:00	–	nessus
Tenable Nessus	RHEL 2.1 : openssl (RHSA-2003:102)	6 Jul 200400:00	–	nessus
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	openssl	0.9.7b-1	openssl_0.9.7b-1_any.deb
Debian	12	any	openssl	0.9.7b-1	openssl_0.9.7b-1_any.deb
Debian	13	any	openssl	0.9.7b-1	openssl_0.9.7b-1_any.deb
Debian	14	any	openssl	0.9.7b-1	openssl_0.9.7b-1_any.deb
Debian	999	any	openssl	0.9.7b-1	openssl_0.9.7b-1_any.deb

18 Mar 2003 05:00Current

8.6High risk

Vulners AI Score8.6

CVSS 25

EPSS0.06393

cve 2003 0147 openssl vulnerability rsa blinding private key exposure timing attack.