QwikSec

Security Database

CVE

CWE

Training

CVE-2002-1568

Published: Oct 8, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.ebitech.sk/patrik/SA/SA-20031002.txt

x_refsource_MISC

http://cvs.openssl.org/chngview?cn=7659

x_refsource_CONFIRM

20031002 New OpenSSL remote vulnerability (issue date 2003/10/02)

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.