GCVE-VVD-CERTCC-2003-888801 — Vulnetix

GCVE-VVD-CERTCC-2003-888801

Advisory PublishedCVSS 0.0/10

Vulnetix · Advisory published March 19, 2003

SSL/TLS implementations that respond distinctively to an incorrect PKCS #1 v1.5 encoded SSL/TLS version number expose the premaster secret to a modified Bleichenbacher attack. An attacker could decrypt a given SSL/TLS session or forge a signature on behalf of a vulnerable application's private RSA key.

Download JSON Open in Console

Risk Scores

CVSS 2.0

0.0/10

None · AV:--/AC:--/Au:--/C:--/I:--/A:--

certcc-cam

certcc-cam

impact10population15exploitation0widely_known16score_current4.05ease_of_exploitation6

certcc-vrda

certcc-vrda

d1_direct_report1

certcc-cvss-temporal-env

certcc-cvss-temporal-env

temporal_score0remediation_levelNDreport_confidenceNDenvironmental_score0target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

Transitive aliases

CVE-2002-1375 CVE-2002-0840 RHSA-2002:243 DSA-168 VAR-200208-0144 BDU:2015-04062 GHSA-fhww-cg6g-p27c CVE-2003-0020 EUVD-2002-1360 RHSA-2003:320 RHSA-2002:157 DSA-135 DSA-188 VAR-200303-0010 VVD-CERTCC-2003-203897 CVE-2002-1233 RHSA-2003:102 CVE-2003-0147 CVE-2003-0543 BDU:2015-01378 DEBIAN-CVE-2002-0655 RHSA-2002:289 GSD-2003-0851 VVD-CERTCC-2003-434566 BDU:2015-04065 CVE-2002-1374 RHSA-2002:251 CVE-2003-0545 EUVD-2004-0079 BDU:2015-07484 DSA-136-3 EUVD-2002-0650 EUVD-2003-0187 GSD-2002-1375 DEBIAN-CVE-2002-0392 BDU:2015-03282 GHSA-3626-95rf-mfw3 CVE-2003-0150 DEBIAN-CVE-2003-0254 CVE-2001-1246 DEBIAN-CVE-2003-0020 EUVD-2003-0020 RHSA-2002:248 EUVD-2002-1217 CVE-2005-1247 RHSA-2003:166 GSD-2002-0653 EUVD-2002-1359 DEBIAN-CVE-2003-0789 EUVD-2003-0249 VVD-CERTCC-2004-465542 CVE-2002-0843 VAR-200411-0173 EUVD-2003-0069 EUVD-2003-0842 GSD-2002-0840 GHSA-h5gj-xw8w-hmjf BDU:2015-08200 DEBIAN-CVE-2003-0132 GSD-2003-0542 DEBIAN-CVE-2002-0658 GSD-2002-0839 DEBIAN-CVE-2003-0542 GHSA-rf99-cxf6-755h EUVD-2003-0127 RHSA-2003:117 BDU:2015-08204 EUVD-2002-0649 VVD-CERTCC-2004-484726 GHSA-9jw8-9j6r-p392 GHSA-v9gx-6vwh-26c3 EUVD-2003-0780 CVE-2004-0079 CVE-2002-0656 GSD-2004-0112 RHSA-2002:146 CVE-2003-0253 CVE-2001-0131 VVD-CERTCC-2003-380864 VVD-CERTCC-2002-104555 CVE-2002-0659 RHSA-2002:163 RHSA-2003:240 GHSA-8phx-r45c-q556 CVE-2003-0078 CVE-2003-0544 EUVD-2003-0537 DSA-137 BDU:2015-04063 GHSA-xcj5-xcx2-vvvv DEBIAN-CVE-2003-0544 DEBIAN-CVE-2004-0112 CVE-2002-1568 RHSA-2003:243 DEBIAN-CVE-2002-1568 CVE-2003-0073 GHSA-cvpf-93m7-95jr DSA-253 RHSA-2002:155 RHSA-2003:244 GSD-2002-0658 CVE-2003-0254 DSA-181 GHSA-xchw-jqmw-jcvc GHSA-cc5w-cgc4-9qf7 RHSA-2003:083 GSD-2003-0192 GHSA-rg25-cp4q-r4c8 GHSA-chfp-36fq-v6g3 EUVD-2003-0143 BDU:2015-08201 VVD-CERTCC-2003-549142 DSA-195 EUVD-2002-0975 DSA-288 VVD-CERTCC-2002-308891 DSA-212 EUVD-2005-1250 GSD-2002-1373 BDU:2015-08203 DEBIAN-CVE-2003-0147 RHSA-2002:160 CVE-2003-0851 DSA-303 RHSA-2002:103 RHSA-2003:116 DEBIAN-CVE-2002-0656 BDU:2015-08202 CVE-2002-0655 GSD-2002-0655 GSD-2002-0656 GHSA-7mfp-q9xp-qq39 GHSA-6r62-6x7v-wrm2 GSD-2002-1374 GHSA-vw24-98xw-c2qv RHSA-2003:104 RHSA-2004:120 EUVD-2004-0081 RHSA-2003:063 EUVD-2002-1549 EUVD-2002-1357 EUVD-2002-1358 RHSA-2003:205 CVE-2003-0083 DEBIAN-CVE-2003-0131 BDU:2015-01443 DEBIAN-CVE-2002-0659 EUVD-2003-0146 GSD-2002-0986 VAR-200303-0118 GHSA-6rjg-j93g-96pp VVD-CERTCC-2002-102795 EUVD-2002-0653 CVE-2002-1394 GHSA-5r59-c396-qwfm BDU:2015-08199 BDU:2015-08206 GHSA-2x68-h5x4-c4qp cisco-sa-20030930-ssl GHSA-ph6p-3j2f-xq2g RHSA-2002:126 EUVD-2001-1227 CVE-2004-0112 EUVD-2003-0074 EUVD-2003-0538 VAR-200208-0243 VVD-CERTCC-2002-748355 GHSA-g3vc-c43j-gjjv VVD-CERTCC-2003-206537 RHSA-2003:301 GSD-2004-0079 GHSA-2v5j-pf93-x5xr BDU:2015-04064 CVE-2002-1373 RHSA-2003:139 GSD-2003-0078 GHSA-qqh8-wx7x-qgh9 EUVD-2003-0539 EUVD-2002-0651 RHSA-2002:136 CVE-2002-1157 RHSA-2002:153 VVD-CERTCC-2002-944335 RHSA-2002:129 DEBIAN-CVE-2003-0078 EUVD-2004-0112 GHSA-2qc3-wjjq-65hv EUVD-2002-0831 RHSA-2003:101 VAR-200411-0172 RHSA-2002:184 CVE-2002-0658 DEBIAN-CVE-2003-0253 DSA-187 EUVD-2002-0835 RHSA-2002:118 GSD-2002-1233 BDU:2015-08198 RHSA-2004:119 GSD-2003-0545 RHSA-2002:154 EUVD-2001-0131 BDU:2015-07478 GHSA-5cfw-vgxw-pqxm EUVD-2003-0536 GHSA-7pf5-hfgr-ch72 GSD-2003-0131 RHSA-2003:106 GHSA-4wcr-f6x9-g539 GSD-2002-0985 RHSA-2004:121 DSA-394 RHSA-2002:193 GSD-2005-1247 EUVD-2002-0652 GHSA-36m7-hm82-xm8q RHSA-2003:082 VAR-200311-0091 RHSA-2002:288 RHSA-2002:117 DEBIAN-CVE-2002-0840 DSA-136-2 VAR-200208-0244 GHSA-8v5p-2cpv-c2x6 GSD-2002-0657 DEBIAN-CVE-2003-0083 RHSA-2003:062 GHSA-v3q3-83mw-m54r EUVD-2002-0832 DEBIAN-CVE-2004-0079 BDU:2015-07476 DEBIAN-CVE-2003-0545 GHSA-gvcx-q88q-m695 EUVD-2003-0079 RHSA-2003:290 VAR-200411-0171 VVD-CERTCC-2002-258555 RHSA-2004:015 RHSA-2003:093 RHSA-2002:150 EUVD-2022-1681 DEBIAN-CVE-2003-0192 GSD-2001-0131 cisco-sa-20040317-openssl GHSA-4352-7f73-983c DSA-136 EUVD-2003-0128 VVD-CERTCC-2003-412478 CVE-2002-0392 GHSA-6hh5-x52p-p482 CVE-2002-0985 DSA-393 GHSA-3x2f-268g-8hg7 VAR-200312-0218 RHSA-2002:134 EUVD-2002-1144 CVE-2004-0081 RHSA-2002:164 GSD-2002-0843 GHSA-m2h2-rm4v-5p5x CVE-2002-0986 EUVD-2002-0974 VVD-CERTCC-2003-997481 BDU:2015-08208 GHSA-mmjc-3g2p-897m CVE-2003-0789 CVE-2002-0839 EUVD-2003-0248 VVD-CERTCC-2002-240329 GSD-2002-0659 VVD-CERTCC-2003-935264 CVE-2002-1376 CVE-2002-0657 RHSA-2003:158 GHSA-v5cr-9693-q9cg GHSA-42vq-2xjj-6g8w EUVD-2002-0647 BDU:2015-07479 DSA-136-1 DEBIAN-CVE-2003-0543 CVE-2003-0192 DEBIAN-CVE-2004-0081 RHSA-2002:161 CVE-2003-0542 CVE-2002-0653 RHSA-2003:075 VVD-CERTCC-2002-561275 GHSA-p3wx-7ggv-j5vx BDU:2015-08205 BDU:2015-08207 VVD-CERTCC-2003-255484 CVE-2003-0132 DEBIAN-CVE-2002-0657 VVD-CISA-2004-0079 DSA-465 RHSA-2003:405 RHSA-2002:244 GHSA-4q57-g9fh-w67x GHSA-pcwf-qwvv-qjg3 GSD-2004-0081 RHSA-2002:135 EUVD-2002-0389 GHSA-39rv-383r-32wp RHSA-2003:159 GSD-2003-0147 VVD-CERTCC-2004-288574 RHSA-2003:360 DSA-225 RHSA-2003:094 GHSA-mq68-g7rr-6m25 RHSA-2004:139

References

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

url

SSL/TLS implementations disclose side channel information via PKCS #1 v1.5 version number extension

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›