NetSight
IP …
medium5.0Public exploit code

CVE-2002-0659

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.

Affected products

VendorProductAffected versions
OpensslOpenssl
Versions 0.9.1c, 0.9.2b, 0.9.3, 0.9.4, 0.9.5, 0.9.5a
OracleApplication Server
All versions
Versions 1.0.2, 1.0.2.1s, 1.0.2.2
OracleCorporate Time Outlook Connector
Versions 3.1, 3.1.1, 3.1.2, 3.3
OracleHttp Server
Versions 9.0.1, 9.2.0
AppleMac Os X
Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1

References