CVE-2003-0851

Related Files

OpenSSL Security Advisory 20031104

Posted Nov 4, 2003

Site openssl.org

OpenSSL Security Advisory 20031104 - A bug in OpenSSL 0.9.6 would cause certain ASN.1 sequences to trigger a large recursion. On platforms such as Windows this large recursion cannot be handled correctly and so the bug causes OpenSSL to crash. A remote attacker could exploit this flaw if they can send arbitrary ASN.1 sequences which would cause OpenSSL to crash. This could be performed for example by sending a client certificate to a SSL/TLS enabled server which is configured to accept them.

tags | advisory, remote, arbitrary

systems | windows

advisories | CVE-2003-0851

SHA-256 | 409756506e14f27eaed3fa2e17e064358dee057651432c52488fd3436c6babf8

Download | Favorite | View