Description

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.

Remediation

References

CVE-2002-0656

Related Vulnerabilities

OpenSSL Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)

SugarCRM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-17314)

Perl Out-of-bounds Write Vulnerability (CVE-2018-18311)

WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.5.18.727)

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10268)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2002-0656