PT-2003-1111 · Openssl+1 · Openssl+1
Dan Boneh
+1
·
Publicado
2003-03-18
·
Atualizado
2018-10-19
·
CVE-2003-0147
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
OpenSSL versions 0.9.5a through 0.9.6b
Description
The issue concerns multiple vulnerabilities in the OpenSSL package of Red Hat Linux, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited by determining factors using timing differences on the number of extra reductions during Montgomery reduction and the use of different integer multiplication algorithms.
Recommendations
For versions 0.9.5a through 0.9.6b, consider disabling the use of RSA blinding by default as a temporary workaround until a patch is available. Restrict access to sensitive information and minimize the risk of exploitation by limiting remote access to the affected systems. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openssl
Red Hat