NVD

Id
73294  
Name
CVE-2003-0147  
Description
OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server"s private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2003-03-31  
Modified Date
2016-10-17  
Seq
2003-0147  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
377506 73294 CVE-2003-0147 CSSA-2003-014.0  View
377507 73294 CVE-2003-0147 20030501-01-I  View
377508 73294 CVE-2003-0147 20030313 OpenSSL Private Key Disclosure  View
377509 73294 CVE-2003-0147 http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf  View
377510 73294 CVE-2003-0147 CLA-2003:625  View
377511 73294 CVE-2003-0147 20030313 Vulnerability in OpenSSL  View
377512 73294 CVE-2003-0147 20030317 [ADVISORY] Timing Attack on OpenSSL  View
377513 73294 CVE-2003-0147 20030320 [OpenPKG-SA-2003.026] OpenPKG Security Advisory (openssl)  View
377514 73294 CVE-2003-0147 GLSA-200303-15  View
377515 73294 CVE-2003-0147 GLSA-200303-24  View
377516 73294 CVE-2003-0147 oval:org.mitre.oval:def:466  View
377517 73294 CVE-2003-0147 DSA-288  View
377518 73294 CVE-2003-0147 GLSA-200303-23  View
377519 73294 CVE-2003-0147 VU#997481  View
377520 73294 CVE-2003-0147 MDKSA-2003:035  View
377521 73294 CVE-2003-0147 OpenPKG-SA-2003.019  View
377522 73294 CVE-2003-0147 http://www.openssl.org/news/secadv_20030317.txt  View
377523 73294 CVE-2003-0147 RHSA-2003:101  View
377524 73294 CVE-2003-0147 RHSA-2003:102  View
377525 73294 CVE-2003-0147 20030325 Fwd: APPLE-SA-2003-03-24 Samba, OpenSSL  View
377526 73294 CVE-2003-0147 20030327 Immunix Secured OS 7+ openssl update  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63372 JVNDB-2003-000098 OpenSSL の RSA アルゴリズムにおけるタイミング攻撃を受ける脆弱性 OpenSSL で RSA が暗号化アルゴリズムに利用されている場合、RSA 形式の秘密鍵を生成する際の処理時間を計測、分析することで、秘密鍵を解析することが可能なタイミング攻撃を受ける脆弱性が存在します。 CVE-2003-0147 6975 CVE-2003-0147 73294 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000098.html 2003-03-27 2007-04-01 View