CVE-2002-0656

high · 7.5

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.

7.5

CVSS

89.8%

EPSS (exploit prob.)

100th

EPSS percentile

2002-08-12

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
openssl	openssl	0.9.1c
openssl	openssl	0.9.2b
openssl	openssl	0.9.3
openssl	openssl	0.9.4
openssl	openssl	0.9.5
openssl	openssl	0.9.5a
openssl	openssl	0.9.6
openssl	openssl	0.9.6a
openssl	openssl	0.9.6b
openssl	openssl	0.9.6c
openssl	openssl	0.9.6d
openssl	openssl	0.9.7
openssl	openssl	0.9.7
oracle	application_server	all versions
oracle	application_server	1.0.2
oracle	application_server	1.0.2.1s
oracle	application_server	1.0.2.2
oracle	corporate_time_outlook_connector	3.1
oracle	corporate_time_outlook_connector	3.1.1
oracle	corporate_time_outlook_connector	3.1.2
oracle	corporate_time_outlook_connector	3.3
oracle	http_server	9.0.1
oracle	http_server	9.2.0
apple	mac_os_x	10.0
apple	mac_os_x	10.0.1
apple	mac_os_x	10.0.2
apple	mac_os_x	10.0.3
apple	mac_os_x	10.0.4
apple	mac_os_x	10.1
apple	mac_os_x	10.1.1
apple	mac_os_x	10.1.2
apple	mac_os_x	10.1.3
apple	mac_os_x	10.1.4
apple	mac_os_x	10.1.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2002-0656