CVEvulnerability
CVE-2003-0851
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
Affected configurations
• cisco ios 12.1\(11\)e
• cisco ios 12.1\(11b\)e
• cisco ios 12.2sx
• cisco ios 12.2sy
• cisco css11000 content services switch
• cisco pix firewall 6.2.2 .111
• openssl openssl 0.9.6
• openssl openssl 0.9.6a
• openssl openssl 0.9.6b
• openssl openssl 0.9.6c
• openssl openssl 0.9.6d
• openssl openssl 0.9.6e
• openssl openssl 0.9.6f
• openssl openssl 0.9.6g
• openssl openssl 0.9.6h
• openssl openssl 0.9.6i
• openssl openssl 0.9.6j
• openssl openssl 0.9.6k
• openssl openssl 0.9.7
• openssl openssl 0.9.7a
• openssl openssl 0.9.7b
• cisco pix firewall software 6.0
• cisco pix firewall software 6.0\(1\)
• cisco pix firewall software 6.0\(2\)
• cisco pix firewall software 6.0\(3\)
• cisco pix firewall software 6.0\(4\)
• cisco pix firewall software 6.0\(4.101\)
• cisco pix firewall software 6.1
• cisco pix firewall software 6.1\(1\)
• cisco pix firewall software 6.1\(2\)
• cisco pix firewall software 6.1\(3\)
• cisco pix firewall software 6.1\(4\)
• cisco pix firewall software 6.1\(5\)
• cisco pix firewall software 6.2
• cisco pix firewall software 6.2\(1\)
• cisco pix firewall software 6.2\(2\)
• cisco pix firewall software 6.2\(3\)
• cisco pix firewall software 6.3\(1\)
• cisco pix firewall software 6.3\(3.102\)
References
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-003.txt.asc ftp.netbsd.org
- ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc patches.sgi.com
- http://marc.info/?l=bugtraq&m=106796246511667&w=2 marc.info
- http://marc.info/?l=bugtraq&m=108403850228012&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2004-119.html rhn.redhat.com
- http://secunia.com/advisories/17381 secunia.com
- http://www.cisco.com/warp/public/707/cisco-sa-20030930-ssl.shtml www.cisco.com
- http://www.kb.cert.org/vuls/id/412478 Patch, Third Party Advisory, US Government Resource
- http://www.openssl.org/news/secadv_20031104.txt Patch, Vendor Advisory
- http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html www.redhat.com
- http://www.securityfocus.com/bid/8970 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5528 oval.cisecurity.org
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-003.txt.asc ftp.netbsd.org
- ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc patches.sgi.com
- http://marc.info/?l=bugtraq&m=106796246511667&w=2 marc.info
- http://marc.info/?l=bugtraq&m=108403850228012&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2004-119.html rhn.redhat.com
- http://secunia.com/advisories/17381 secunia.com
- http://www.cisco.com/warp/public/707/cisco-sa-20030930-ssl.shtml www.cisco.com
- http://www.kb.cert.org/vuls/id/412478 Patch, Third Party Advisory, US Government Resource
- http://www.openssl.org/news/secadv_20031104.txt Patch, Vendor Advisory
- http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html www.redhat.com
- http://www.securityfocus.com/bid/8970 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5528 oval.cisecurity.org