CVEvulnerability

CVE-2003-0078

5.0 MEDIUM Published 2003-03-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-03-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-203

Description

ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."

Affected configurations

• openssl openssl (< 0.9.6i) • openssl openssl 0.9.6i • openssl openssl 0.9.7 • freebsd freebsd 4.2 • freebsd freebsd 4.3 • freebsd freebsd 4.4 • freebsd freebsd 4.5 • freebsd freebsd 4.6 • freebsd freebsd 4.7 • freebsd freebsd 5.0 • openbsd openbsd 3.1 • openbsd openbsd 3.2

Related

Weakness · CWE (1)

  • CWE-203 Observable Discrepancy weakness

Referenced by CWE · observed example (2)

  • CWE-203 Observable Discrepancy weakness
  • CWE-208 Observable Timing Discrepancy weakness

References