CVE-2002-0655: High severity OpenSSL OpenSSL vulnerability

Published Jul 31, 2002

Updated

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.

Affected Software

34 affected components

OpenSSL OpenSSL=0.9.1c

OpenSSL OpenSSL=0.9.2b

OpenSSL OpenSSL=0.9.3

OpenSSL OpenSSL=0.9.4

OpenSSL OpenSSL=0.9.5

OpenSSL OpenSSL=0.9.5a

OpenSSL OpenSSL=0.9.6

OpenSSL OpenSSL=0.9.6a

OpenSSL OpenSSL=0.9.6b

OpenSSL OpenSSL=0.9.6c

OpenSSL OpenSSL=0.9.6d

OpenSSL OpenSSL=0.9.7-beta1

OpenSSL OpenSSL=0.9.7-beta2

Oracle Application Server

Oracle Application Server=1.0.2

Oracle Application Server=1.0.2.1s

Oracle Application Server=1.0.2.2

Oracle Corporate Time Outlook Connector=3.1

Oracle Corporate Time Outlook Connector=3.1.1

Oracle Corporate Time Outlook Connector=3.1.2

Oracle Corporate Time Outlook Connector=3.3

Oracle HTTP Server=9.0.1

Oracle HTTP Server=9.2.0

Apple iOS and macOS=10.0

Apple iOS and macOS=10.0.1

Apple iOS and macOS=10.0.2

Apple iOS and macOS=10.0.3

Apple iOS and macOS=10.0.4

Apple iOS and macOS=10.1

Apple iOS and macOS=10.1.1

Apple iOS and macOS=10.1.2

Apple iOS and macOS=10.1.3

Apple iOS and macOS=10.1.4

Apple iOS and macOS=10.1.5

Event History

Jul 31, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0655?

CVE-2002-0655 is considered a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.

How do I fix CVE-2002-0655?

To fix CVE-2002-0655, upgrade to a version of OpenSSL that is later than 0.9.6d or 0.9.7-beta2.

What systems are affected by CVE-2002-0655?

CVE-2002-0655 affects OpenSSL versions 0.9.6d and earlier as well as 0.9.7-beta2 and earlier on 64-bit platforms.

What types of attacks can exploit CVE-2002-0655?

CVE-2002-0655 can be exploited to create a denial of service condition or to execute arbitrary code remotely.

Is CVE-2002-0655 relevant to current software?

CVE-2002-0655 primarily affects outdated versions of OpenSSL and thus is less relevant to modern systems using updated libraries.