CVE

Id
5046  
CVE No.
CVE-2002-0656  
Status
Candidate  
Description
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.  
Phase
Modified (20071016)  
Votes
ACCEPT(3) Baker, Cole, Wall | MODIFY(1) Cox | NOOP(2) Christey, Foat  
Comments
Christey> The CVE content decision "CD:SF-LOC" recommends that multiple | bugs of the same type, in the same version of software, should | be combined. Content decisions such as CD:SF-LOC ensure the | long-term consistency of CVE across all vulnerability reports, | since the amount of detail can vary widely. | Cox> ADDREF:RHSA-2002:163 RHSA-2002:164 RHSA-2002:157 | This issue also affects SSLeay and BSAFE SSL-C | ADDREF: http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL_Products_Security_Bulletin_Aug_8_2002.pdf | Christey> BUGTRAQ:20021003 Cisco Secure Content Accelerator vulnerable to SSL worm | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=103374616018622&w=2 | CONFIRM:http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_sca/sca_320/v320b20.htm#xtocid13 | Christey> I should probably create a separate CAN for the BSAFE issues, | unless there is a codebase relationship. | Christey> XF:openssl-ssl3-sessionid-bo(9716) | URL:http://www.iss.net/security_center/static/9716.php  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26330 5046 CVE-2002-0656 BUGTRAQ:20020730 OpenSSL Security Altert - Remote Buffer Overflows  View
26331 5046 CVE-2002-0656 REDHAT:RHSA-2002:155  View
26332 5046 CVE-2002-0656 DEBIAN:DSA-136  View
26333 5046 CVE-2002-0656 BUGTRAQ:20020730 [OpenPKG-SA-2002.008] OpenPKG Security Advisory (openssl)  View
26334 5046 CVE-2002-0656 BUGTRAQ:20020730 TSLSA-2002-0063 - openssl  View
26335 5046 CVE-2002-0656 BUGTRAQ:20020730 OpenSSL patches for other versions  View
26336 5046 CVE-2002-0656 ENGARDE:ESA-20020730-019  View
26337 5046 CVE-2002-0656 BUGTRAQ:20020730 GLSA: OpenSSL  View
26338 5046 CVE-2002-0656 SUSE:SuSE-SA:2002:027  View
26339 5046 CVE-2002-0656 CERT:CA-2002-23  View
26340 5046 CVE-2002-0656 URL:http://www.cert.org/advisories/CA-2002-23.html  View
26341 5046 CVE-2002-0656 CERT-VN:VU#102795  View
26342 5046 CVE-2002-0656 URL:http://www.kb.cert.org/vuls/id/102795  View
26343 5046 CVE-2002-0656 CERT-VN:VU#258555  View
26344 5046 CVE-2002-0656 URL:http://www.kb.cert.org/vuls/id/258555  View
26345 5046 CVE-2002-0656 CALDERA:CSSA-2002-033.0  View
26346 5046 CVE-2002-0656 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt  View
26347 5046 CVE-2002-0656 CALDERA:CSSA-2002-033.1  View
26348 5046 CVE-2002-0656 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt  View
26349 5046 CVE-2002-0656 FREEBSD:FreeBSD-SA-02:33  View
26350 5046 CVE-2002-0656 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc  View
26351 5046 CVE-2002-0656 MANDRAKE:MDKSA-2002:046  View
26352 5046 CVE-2002-0656 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php  View
26353 5046 CVE-2002-0656 CONECTIVA:CLA-2002:513  View
26354 5046 CVE-2002-0656 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513  View
26355 5046 CVE-2002-0656 XF:openssl-ssl2-masterkey-bo(9714)  View
26356 5046 CVE-2002-0656 URL:http://www.iss.net/security_center/static/9714.php  View
26357 5046 CVE-2002-0656 BID:5362  View
26358 5046 CVE-2002-0656 URL:http://www.securityfocus.com/bid/5362  View
26359 5046 CVE-2002-0656 BID:5363  View
26360 5046 CVE-2002-0656 URL:http://www.securityfocus.com/bid/5363  View
26361 5046 CVE-2002-0656 XF:openssl-ssl3-sessionid-bo(9716)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63845 JVNDB-2002-000172 OpenSSL の SSL2/SSL3 ハンドシェイクにおけるバッファオーバーフローの脆弱性 OpenSSL には、 OpenSSL サーバにおいて SSL version 2.0 (以下、SSLv2) ハンドシェイク処理によりバッファオーバーフローの脆弱性が、また OpenSSL クライアントにおいて SSLv3 ハンドシェイク処理によりバッファオーバーフローの脆弱性が存在します。 CVE-2002-0656 5046 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000172.html  View