CVE-2003-0131
- State
- Published
- Severity
- Not scored
- Published
- Mar 21, 2003
- Updated
- Aug 8, 2024
- Reserved
- Mar 13, 2003
Description
The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-288vendor-advisory
- RHSA-2003:101vendor-advisory
- RHSA-2003:102vendor-advisory
- 2003-0013vendor-advisory
- http://eprint.iacr.org/2003/052/
- oval:org.mitre.oval:def:461vdb-entrysignature
- GLSA-200303-20vendor-advisory
- SuSE-SA:2003:024vendor-advisory
- 7148vdb-entry
- http://lists.apple.com/mhonarc/security-announce/msg00028.html
- OpenPKG-SA-2003.026vendor-advisory
- http://www.linuxsecurity.com/advisories/immunix_advisory-3066.html
- IMNX-2003-7+-001-01vendor-advisory
- http://www.openssl.org/news/secadv_20030319.txt
- MDKSA-2003:035vendor-advisory
- 20030324 GLSA: openssl (200303-20)mailing-list
- ssl-premaster-information-leak(11586)vdb-entry
- 20030319 [OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 paddingmailing-list
- VU#888801third-party-advisory
- CLA-2003:625vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.