NetSight
IP …
high7.5Public exploit code

CVE-2002-0656

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.

Affected products

VendorProductAffected versions
OpensslOpenssl
Versions 0.9.1c, 0.9.2b, 0.9.3, 0.9.4, 0.9.5, 0.9.5a
OracleApplication Server
All versions
Versions 1.0.2, 1.0.2.1s, 1.0.2.2
OracleCorporate Time Outlook Connector
Versions 3.1, 3.1.1, 3.1.2, 3.3
OracleHttp Server
Versions 9.0.1, 9.2.0
AppleMac Os X
Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1

References