openssl

296 results · Feed

• Unscored —
  CVE-2005-2946

  The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographic…

  openssl Debian
  Sep 16, 2005
• Unscored —
  CVE-2004-0975

  The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows l…

  openssl Debian
  Oct 20, 2004
• Unscored —
  CVE-2003-0078 Public exploit EPSS 14%

  ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an …

  openssl Debian
  Sep 1, 2004
• Unscored —
  CVE-2004-0112 EPSS 10%

  The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly…

  openssl Debian
  Mar 18, 2004
• Unscored —
  CVE-2004-0081

  OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a de…

  openssl Debian
  Mar 18, 2004
• High 7.5
  CVE-2004-0079

  The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause …

  openssl Debian
  Mar 18, 2004
• Unscored —
  CVE-2002-1568

  OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows r…

  openssl Debian
  Oct 8, 2003
• Unscored —
  CVE-2003-0545 EPSS 87%

  Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly ex…

  openssl Debian
  Oct 1, 2003
• Unscored —
  CVE-2003-0543 Public exploit EPSS 27%

  Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL cli…

  openssl Debian
  Oct 1, 2003
• Unscored —
  CVE-2003-0544

  OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote a…

  openssl Debian
  Oct 1, 2003
• Unscored —
  CVE-2003-0131

  The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unaut…

  openssl Debian
  Mar 21, 2003
• Unscored —
  CVE-2003-0147

  OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private ke…

  openssl Debian
  Mar 18, 2003
• Unscored —
  CVE-2002-0659 Public exploit EPSS 36%

  The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial …

  openssl Debian
  Jul 31, 2002
• Unscored —
  CVE-2002-0656 Public exploit EPSS 90%

  Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrar…

  openssl Debian
  Jul 31, 2002
• Unscored —
  CVE-2002-0655

  OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on …

  openssl Debian
  Jul 31, 2002
• Unscored —
  CVE-2002-0657

  Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code …

  openssl Debian
  Jul 31, 2002