CVEvulnerability

CVE-2003-0147

5.0 MEDIUM Published 2003-03-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-03-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).

Affected configurations

• openpkg openpkg • openpkg openpkg 1.1 • openpkg openpkg 1.2 • openssl openssl 0.9.6 • openssl openssl 0.9.6a • openssl openssl 0.9.6b • openssl openssl 0.9.6c • openssl openssl 0.9.6d • openssl openssl 0.9.6e • openssl openssl 0.9.6g • openssl openssl 0.9.6h • openssl openssl 0.9.6i • openssl openssl 0.9.7 • openssl openssl 0.9.7a • stunnel stunnel 3.7 • stunnel stunnel 3.8 • stunnel stunnel 3.9 • stunnel stunnel 3.10 • stunnel stunnel 3.11 • stunnel stunnel 3.12 • stunnel stunnel 3.13 • stunnel stunnel 3.14 • stunnel stunnel 3.15 • stunnel stunnel 3.16 • stunnel stunnel 3.17 • stunnel stunnel 3.18 • stunnel stunnel 3.19 • stunnel stunnel 3.20 • stunnel stunnel 3.21 • stunnel stunnel 3.22 • stunnel stunnel 4.0 • stunnel stunnel 4.01 • stunnel stunnel 4.02 • stunnel stunnel 4.03 • stunnel stunnel 4.04

References