medium5.0

CVE-2003-0851

OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.

Impact

OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.

Affected products

Vendor	Product	Affected versions
Cisco	Ios	Versions 12.1\(11\)e, 12.1\(11b\)e, 12.2sx, 12.2sy
Cisco	Css11000 Content Services Switch	All versions
Cisco	Pix Firewall	Version 6.2.2_.111
Openssl	Openssl	Versions 0.9.6, 0.9.6a, 0.9.6b, 0.9.6c, 0.9.6d, 0.9.6e
Cisco	Pix Firewall Software	Versions 6.0, 6.0\(1\), 6.0\(2\), 6.0\(3\), 6.0\(4\), 6.0\(4.101\)

References