← back
CVE-2002-0656

CVE-2002-0656

EPSS 89.8%
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/40347unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txtftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txtftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.aschttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513http://www.cert.org/advisories/CA-2002-23.htmlhttp://www.iss.net/security_center/static/9714.phphttp://www.iss.net/security_center/static/9716.phphttp://www.kb.cert.org/vuls/id/102795http://www.kb.cert.org/vuls/id/258555http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.phphttp://www.securityfocus.com/bid/5362http://www.securityfocus.com/bid/5363