7.5
CWE
NVD-CWE-Other
Advisory Published
Updated

CVE-2002-0655

First published: Wed Jul 31 2002(Updated: )

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
OpenSSL=0.9.1c
OpenSSL=0.9.2b
OpenSSL=0.9.3
OpenSSL=0.9.4
OpenSSL=0.9.5
OpenSSL=0.9.5a
OpenSSL=0.9.6
OpenSSL=0.9.6a
OpenSSL=0.9.6b
OpenSSL=0.9.6c
OpenSSL=0.9.6d
OpenSSL=0.9.7-beta1
OpenSSL=0.9.7-beta2
Oracle Java System Application Server
Oracle Java System Application Server=1.0.2
Oracle Java System Application Server=1.0.2.1s
Oracle Java System Application Server=1.0.2.2
Oracle Corporate Time Outlook Connector=3.1
Oracle Corporate Time Outlook Connector=3.1.1
Oracle Corporate Time Outlook Connector=3.1.2
Oracle Corporate Time Outlook Connector=3.3
Oracle HTTP Server=9.0.1
Oracle HTTP Server=9.2.0
Apple iOS and macOS=10.0
Apple iOS and macOS=10.0.1
Apple iOS and macOS=10.0.2
Apple iOS and macOS=10.0.3
Apple iOS and macOS=10.0.4
Apple iOS and macOS=10.1
Apple iOS and macOS=10.1.1
Apple iOS and macOS=10.1.2
Apple iOS and macOS=10.1.3
Apple iOS and macOS=10.1.4
Apple iOS and macOS=10.1.5

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2002-0655?

    CVE-2002-0655 is considered a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.

  • How do I fix CVE-2002-0655?

    To fix CVE-2002-0655, upgrade to a version of OpenSSL that is later than 0.9.6d or 0.9.7-beta2.

  • What systems are affected by CVE-2002-0655?

    CVE-2002-0655 affects OpenSSL versions 0.9.6d and earlier as well as 0.9.7-beta2 and earlier on 64-bit platforms.

  • What types of attacks can exploit CVE-2002-0655?

    CVE-2002-0655 can be exploited to create a denial of service condition or to execute arbitrary code remotely.

  • Is CVE-2002-0655 relevant to current software?

    CVE-2002-0655 primarily affects outdated versions of OpenSSL and thus is less relevant to modern systems using updated libraries.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203