CVE

Id
6960  
CVE No.
CVE-2003-0131  
Status
Candidate  
Description
The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."  
Phase
Assigned (20030313)  
Votes
NOOP(1) Christey  
Comments
Christey> REDHAT:RHSA-2003:205  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40307 6960 CVE-2003-0131 BUGTRAQ:20030327 Immunix Secured OS 7+ openssl update  View
40308 6960 CVE-2003-0131 URL:http://www.securityfocus.com/archive/1/archive/1/316577/30/25310/threaded  View
40309 6960 CVE-2003-0131 MISC:http://eprint.iacr.org/2003/052/  View
40310 6960 CVE-2003-0131 BUGTRAQ:20030319 [OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding  View
40311 6960 CVE-2003-0131 URL:http://marc.info/?l=bugtraq&m=104811162730834&w=2  View
40312 6960 CVE-2003-0131 BUGTRAQ:20030324 GLSA: openssl (200303-20)  View
40313 6960 CVE-2003-0131 URL:http://marc.info/?l=bugtraq&m=104852637112330&w=2  View
40314 6960 CVE-2003-0131 MISC:http://www.linuxsecurity.com/advisories/immunix_advisory-3066.html  View
40315 6960 CVE-2003-0131 CALDERA:CSSA-2003-014.0  View
40316 6960 CVE-2003-0131 URL:ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-014.0.txt  View
40317 6960 CVE-2003-0131 GENTOO:GLSA-200303-20  View
40318 6960 CVE-2003-0131 URL:http://www.gentoo.org/security/en/glsa/glsa-200303-20.xml  View
40319 6960 CVE-2003-0131 IMMUNIX:IMNX-2003-7+-001-01  View
40320 6960 CVE-2003-0131 URL:http://www.securityfocus.com/archive/1/archive/1/316577/30/25310/threaded  View
40321 6960 CVE-2003-0131 OPENPKG:OpenPKG-SA-2003.026  View
40322 6960 CVE-2003-0131 URL:http://www.openpkg.org/security/OpenPKG-SA-2003.026-openssl.html  View
40323 6960 CVE-2003-0131 ENGARDE:ESA-20030320-010  View
40324 6960 CVE-2003-0131 FREEBSD:FreeBSD-SA-03:06  View
40325 6960 CVE-2003-0131 MANDRAKE:MDKSA-2003:035  View
40326 6960 CVE-2003-0131 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:035  View
40327 6960 CVE-2003-0131 NETBSD:NetBSD-SA2003-007  View
40328 6960 CVE-2003-0131 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-007.txt.asc  View
40329 6960 CVE-2003-0131 REDHAT:RHSA-2003:101  View
40330 6960 CVE-2003-0131 URL:http://www.redhat.com/support/errata/RHSA-2003-101.html  View
40331 6960 CVE-2003-0131 REDHAT:RHSA-2003:102  View
40332 6960 CVE-2003-0131 URL:http://www.redhat.com/support/errata/RHSA-2003-102.html  View
40333 6960 CVE-2003-0131 CONECTIVA:CLA-2003:625  View
40334 6960 CVE-2003-0131 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000625  View
40335 6960 CVE-2003-0131 DEBIAN:DSA-288  View
40336 6960 CVE-2003-0131 URL:http://www.debian.org/security/2003/dsa-288  View
40337 6960 CVE-2003-0131 SGI:20030501-01-I  View
40338 6960 CVE-2003-0131 URL:ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I  View
40339 6960 CVE-2003-0131 SUSE:SuSE-SA:2003:024  View
40340 6960 CVE-2003-0131 URL:https://lists.opensuse.org/opensuse-security-announce/2003-04/msg00005.html  View
40341 6960 CVE-2003-0131 TRUSTIX:2003-0013  View
40342 6960 CVE-2003-0131 URL:http://marc.info/?l=bugtraq&m=104878215721135&w=2  View
40343 6960 CVE-2003-0131 CONFIRM:http://lists.apple.com/mhonarc/security-announce/msg00028.html  View
40344 6960 CVE-2003-0131 CONFIRM:http://www.openssl.org/news/secadv_20030319.txt  View
40345 6960 CVE-2003-0131 CERT-VN:VU#888801  View
40346 6960 CVE-2003-0131 URL:http://www.kb.cert.org/vuls/id/888801  View
40347 6960 CVE-2003-0131 BID:7148  View
40348 6960 CVE-2003-0131 URL:http://www.securityfocus.com/bid/7148  View
40349 6960 CVE-2003-0131 XF:ssl-premaster-information-leak(11586)  View
40350 6960 CVE-2003-0131 URL:http://xforce.iss.net/xforce/xfdb/11586  View
40351 6960 CVE-2003-0131 OVAL:oval:org.mitre.oval:def:461  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63379 JVNDB-2003-000105 Apache HTTP Server の改行文字列 (LF) の処理におけるメモリリークの脆弱性 Apache HTTP Server には大量に連続する改行文字列 (LF) を処理する際の不備により、 割り当て可能なメモリの最大限度を設定しないため、大量の連続する改行文字列を Apache HTTP Server に送信することにより、メモリを消費し尽くす脆弱性が存在します。 CVE-2003-0132 6960 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000105.html  View