CVE Vulnerabilities

CVE-2002-0655

Published: Aug 12, 2002 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.

Affected Software

NameVendorStart VersionEnd Version
OpensslOpenssl0.9.1c (including)0.9.1c (including)
OpensslOpenssl0.9.2b (including)0.9.2b (including)
OpensslOpenssl0.9.3 (including)0.9.3 (including)
OpensslOpenssl0.9.4 (including)0.9.4 (including)
OpensslOpenssl0.9.5 (including)0.9.5 (including)
OpensslOpenssl0.9.5a (including)0.9.5a (including)
OpensslOpenssl0.9.6 (including)0.9.6 (including)
OpensslOpenssl0.9.6a (including)0.9.6a (including)
OpensslOpenssl0.9.6b (including)0.9.6b (including)
OpensslOpenssl0.9.6c (including)0.9.6c (including)
OpensslOpenssl0.9.6d (including)0.9.6d (including)
OpensslOpenssl0.9.7-beta1 (including)0.9.7-beta1 (including)
OpensslOpenssl0.9.7-beta2 (including)0.9.7-beta2 (including)
Application_serverOracle**
Application_serverOracle1.0.2 (including)1.0.2 (including)
Application_serverOracle1.0.2.1s (including)1.0.2.1s (including)
Application_serverOracle1.0.2.2 (including)1.0.2.2 (including)
Corporate_time_outlook_connectorOracle3.1 (including)3.1 (including)
Corporate_time_outlook_connectorOracle3.1.1 (including)3.1.1 (including)
Corporate_time_outlook_connectorOracle3.1.2 (including)3.1.2 (including)
Corporate_time_outlook_connectorOracle3.3 (including)3.3 (including)
Http_serverOracle9.0.1 (including)9.0.1 (including)
Http_serverOracle9.2.0 (including)9.2.0 (including)
Red Hat Enterprise Linux AS (Advanced Server) version 2.1RedHat*
Red Hat Linux 6.2RedHat*
Red Hat Linux 7.0RedHat*
Red Hat Linux 7.1RedHat*
Red Hat Linux 7.2RedHat*
Red Hat Linux 7.3RedHat*
Red Hat Stronghold 3RedHat*
Red Hat Stronghold 4RedHat*

References