Lucene search

MitreCVE-2002-0655

HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0655

2002-08-1204:00:00

mitre

web.nvd.nist.gov

openssl

cve-2002-0655

ascii representations

integers mishandling

denial of service

arbitrary code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.5

Confidence

High

EPSS

0.014

Percentile

86.7%

JSON

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.

Affected configurations

Nvd

Node

opensslopensslMatch0.9.1c

opensslopensslMatch0.9.2b

opensslopensslMatch0.9.3

opensslopensslMatch0.9.4

opensslopensslMatch0.9.5

opensslopensslMatch0.9.5a

opensslopensslMatch0.9.6

opensslopensslMatch0.9.6a

opensslopensslMatch0.9.6b

opensslopensslMatch0.9.6c

opensslopensslMatch0.9.6d

opensslopensslMatch0.9.7beta1

opensslopensslMatch0.9.7beta2

oracleapplication_server

oracleapplication_serverMatch1.0.2

oracleapplication_serverMatch1.0.2.1s

oracleapplication_serverMatch1.0.2.2

oraclecorporate_time_outlook_connectorMatch3.1

oraclecorporate_time_outlook_connectorMatch3.1.1

oraclecorporate_time_outlook_connectorMatch3.1.2

oraclecorporate_time_outlook_connectorMatch3.3

oraclehttp_serverMatch9.0.1

oraclehttp_serverMatch9.2.0

Node

applemac_os_xMatch10.0

applemac_os_xMatch10.0.1

applemac_os_xMatch10.0.2

applemac_os_xMatch10.0.3

applemac_os_xMatch10.0.4

applemac_os_xMatch10.1

applemac_os_xMatch10.1.1

applemac_os_xMatch10.1.2

applemac_os_xMatch10.1.3

applemac_os_xMatch10.1.4

applemac_os_xMatch10.1.5

VendorProductVersionCPE
opensslopenssl0.9.1ccpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*
opensslopenssl0.9.2bcpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*
opensslopenssl0.9.3cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*
opensslopenssl0.9.4cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*
opensslopenssl0.9.5cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*
opensslopenssl0.9.5acpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*
opensslopenssl0.9.6cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*
opensslopenssl0.9.6acpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*
opensslopenssl0.9.6bcpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*
opensslopenssl0.9.6ccpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openssl	openssl	0.9.1c	cpe:2.3:a:openssl:openssl:0.9.1c:::::::*
openssl	openssl	0.9.2b	cpe:2.3:a:openssl:openssl:0.9.2b:::::::*
openssl	openssl	0.9.3	cpe:2.3:a:openssl:openssl:0.9.3:::::::*
openssl	openssl	0.9.4	cpe:2.3:a:openssl:openssl:0.9.4:::::::*
openssl	openssl	0.9.5	cpe:2.3:a:openssl:openssl:0.9.5:::::::*
openssl	openssl	0.9.5a	cpe:2.3:a:openssl:openssl:0.9.5a:::::::*
openssl	openssl	0.9.6	cpe:2.3:a:openssl:openssl:0.9.6:::::::*
openssl	openssl	0.9.6a	cpe:2.3:a:openssl:openssl:0.9.6a:::::::*
openssl	openssl	0.9.6b	cpe:2.3:a:openssl:openssl:0.9.6b:::::::*
openssl	openssl	0.9.6c	cpe:2.3:a:openssl:openssl:0.9.6c:::::::*