CVE

Id
5049  
CVE No.
CVE-2002-0659  
Status
Candidate  
Description
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.  
Phase
Proposed (20020830)  
Votes
ACCEPT(3) Baker, Cole, Wall | MODIFY(1) Cox | NOOP(2) Christey, Foat  
Comments
Cox> ADDREF:RHSA-2002:163 RHSA-2002:184 | add "and possibly arbitrary code execution" | This issue also affects SSLeay and BSAFE SSL-C | ADDREF: http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL_Products_Security_Bulletin_Aug_8_2002.pdf | Christey> CONFIRM:http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_sca/sca_320/v320b20.htm#xtocid13 | Christey> I should probably create a separate CAN for the BSAFE issues, | unless there is a codebase relationship.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26412 5049 CVE-2002-0659 BUGTRAQ:20020730 OpenSSL Security Altert - Remote Buffer Overflows  View
26413 5049 CVE-2002-0659 DEBIAN:DSA-136  View
26414 5049 CVE-2002-0659 BUGTRAQ:20020730 [OpenPKG-SA-2002.008] OpenPKG Security Advisory (openssl)  View
26415 5049 CVE-2002-0659 BUGTRAQ:20020730 TSLSA-2002-0063 - openssl  View
26416 5049 CVE-2002-0659 BUGTRAQ:20020730 OpenSSL patches for other versions  View
26417 5049 CVE-2002-0659 ENGARDE:ESA-20020730-019  View
26418 5049 CVE-2002-0659 BUGTRAQ:20020730 GLSA: OpenSSL  View
26419 5049 CVE-2002-0659 CERT:CA-2002-23  View
26420 5049 CVE-2002-0659 URL:http://www.cert.org/advisories/CA-2002-23.html  View
26421 5049 CVE-2002-0659 CERT-VN:VU#748355  View
26422 5049 CVE-2002-0659 URL:http://www.kb.cert.org/vuls/id/748355  View
26423 5049 CVE-2002-0659 REDHAT:RHSA-2002:164  View
26424 5049 CVE-2002-0659 URL:http://rhn.redhat.com/errata/RHSA-2002-164.html  View
26425 5049 CVE-2002-0659 REDHAT:RHSA-2002:161  View
26426 5049 CVE-2002-0659 URL:http://rhn.redhat.com/errata/RHSA-2002-161.html  View
26427 5049 CVE-2002-0659 REDHAT:RHSA-2002:160  View
26428 5049 CVE-2002-0659 URL:http://rhn.redhat.com/errata/RHSA-2002-160.html  View
26429 5049 CVE-2002-0659 CALDERA:CSSA-2002-033.0  View
26430 5049 CVE-2002-0659 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt  View
26431 5049 CVE-2002-0659 CALDERA:CSSA-2002-033.1  View
26432 5049 CVE-2002-0659 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt  View
26433 5049 CVE-2002-0659 FREEBSD:FreeBSD-SA-02:33  View
26434 5049 CVE-2002-0659 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc  View
26435 5049 CVE-2002-0659 CONECTIVA:CLA-2002:516  View
26436 5049 CVE-2002-0659 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000516  View
26437 5049 CVE-2002-0659 BID:5366  View
26438 5049 CVE-2002-0659 URL:http://www.securityfocus.com/bid/5366  View
26439 5049 CVE-2002-0659 XF:openssl-asn1-parser-dos(9718)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63847 JVNDB-2002-000174 OpenSSL の ASN.1 ライブラリにおけるサービス運用妨害 (Dos) の脆弱性 OpenSSL において、ASN.1 library 内の ans1_get_length() 関数に異常な証明書を受け渡された場合に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0659 5049 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000174.html  View