Skip to content
OpenAdvisories
Unscored DSA-288 2 CVEs

openssl - several vulnerabilities

Published Apr 17, 2003 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 openssl 0.9.6c-2.woody.3

Vulnerabilities 2

  • Unscored —

    The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unaut…

  • Unscored —

    OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private ke…