NVD

Id
73278  
Name
CVE-2003-0131  
Description
The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the Klima-Pokorny-Rosa attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2003-03-24  
Modified Date
2017-07-10  
Seq
2003-0131  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
377377 73278 CVE-2003-0131 NetBSD-SA2003-007  View
377378 73278 CVE-2003-0131 CSSA-2003-014.0  View
377379 73278 CVE-2003-0131 20030501-01-I  View
377380 73278 CVE-2003-0131 CLA-2003:625  View
377381 73278 CVE-2003-0131 http://eprint.iacr.org/2003/052/  View
377382 73278 CVE-2003-0131 http://lists.apple.com/mhonarc/security-announce/msg00028.html  View
377383 73278 CVE-2003-0131 20030319 [OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding  View
377384 73278 CVE-2003-0131 20030324 GLSA: openssl (200303-20)  View
377385 73278 CVE-2003-0131 2003-0013  View
377386 73278 CVE-2003-0131 oval:org.mitre.oval:def:461  View
377387 73278 CVE-2003-0131 DSA-288  View
377388 73278 CVE-2003-0131 GLSA-200303-20  View
377389 73278 CVE-2003-0131 VU#888801  View
377390 73278 CVE-2003-0131 MDKSA-2003:035  View
377391 73278 CVE-2003-0131 OpenPKG-SA-2003.026  View
377392 73278 CVE-2003-0131 http://www.openssl.org/news/secadv_20030319.txt  View
377393 73278 CVE-2003-0131 RHSA-2003:101  View
377394 73278 CVE-2003-0131 RHSA-2003:102  View
377395 73278 CVE-2003-0131 20030327 Immunix Secured OS 7+ openssl update  View
377396 73278 CVE-2003-0131 7148  View
377397 73278 CVE-2003-0131 ssl-premaster-information-leak(11586)  View
377398 73278 CVE-2003-0131 SuSE-SA:2003:024  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63369 JVNDB-2003-000095 OpenSSL の RSA 暗号化アルゴリズムにおける情報漏洩の脆弱性 OpenSSL には RSA が暗号化アルゴリズムに利用されている場合、PKCS#1 の処理内でのバージョン番号の取り扱いの不備により、クライアントとサーバの間でセッションに渡って共有される秘密の値) が漏洩する脆弱性が存在します。 CVE-2003-0131 6959 CVE-2003-0131 73278 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000095.html 2003-03-19 2007-04-01 View