Skip to content
OpenAdvisories
Unscored DSA-253 1 CVE

openssl - information leak

Published Feb 24, 2003 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 openssl 0.9.6c-2.woody.2

Vulnerabilities 1

  • Unscored —
    CVE-2003-0078 Public exploit EPSS 14%

    ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an …