Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2003-0131

The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."

Published

2003-03-24T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application openssl openssl 0.9.6 Yes
Application openssl openssl 0.9.6a Yes
Application openssl openssl 0.9.6b Yes
Application openssl openssl 0.9.6c Yes
Application openssl openssl 0.9.6d Yes
Application openssl openssl 0.9.6e Yes
Application openssl openssl 0.9.6g Yes
Application openssl openssl 0.9.6h Yes
Application openssl openssl 0.9.6i Yes
Application openssl openssl 0.9.7 Yes
Application openssl openssl 0.9.7a Yes
References