NetSight
high7.5

CVE-2002-0655

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow atta…

Impact

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.

Affected products

VendorProductAffected versions
OpensslOpenssl
Versions 0.9.1c, 0.9.2b, 0.9.3, 0.9.4, 0.9.5, 0.9.5a
OracleApplication Server
All versions
Versions 1.0.2, 1.0.2.1s, 1.0.2.2
OracleCorporate Time Outlook Connector
Versions 3.1, 3.1.1, 3.1.2, 3.3
OracleHttp Server
Versions 9.0.1, 9.2.0
AppleMac Os X
Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1

References