Skip to content
OpenAdvisories
Unscored DSA-136-2 4 CVEs

openssl - multiple remote exploits

Published Sep 15, 2002 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 3

ReleasePackageFixed in
Debian · 3.0 openssl 0.9.6c-2.woody.1
Debian · 3.0 openssl094 0.9.4-6.woody.1
Debian · 3.0 openssl095 0.9.5a-6.woody.1

Vulnerabilities 4

  • Unscored —
    CVE-2002-0655

    OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on …

    openssl Debian
  • Unscored —
    CVE-2002-0656 Public exploit EPSS 90%

    Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrar…

    openssl Debian
  • Unscored —
    CVE-2002-0657

    Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code …

    openssl Debian
  • Unscored —
    CVE-2002-0659 Public exploit EPSS 36%

    The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial …

    openssl Debian