First published: Wed Jul 31 2002(Updated: )
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
OpenSSL | =0.9.1c | |
OpenSSL | =0.9.2b | |
OpenSSL | =0.9.3 | |
OpenSSL | =0.9.4 | |
OpenSSL | =0.9.5 | |
OpenSSL | =0.9.5a | |
OpenSSL | =0.9.6 | |
OpenSSL | =0.9.6a | |
OpenSSL | =0.9.6b | |
OpenSSL | =0.9.6c | |
OpenSSL | =0.9.6d | |
OpenSSL | =0.9.7-beta1 | |
OpenSSL | =0.9.7-beta2 | |
Oracle Java System Application Server | ||
Oracle Java System Application Server | =1.0.2 | |
Oracle Java System Application Server | =1.0.2.1s | |
Oracle Java System Application Server | =1.0.2.2 | |
Oracle Corporate Time Outlook Connector | =3.1 | |
Oracle Corporate Time Outlook Connector | =3.1.1 | |
Oracle Corporate Time Outlook Connector | =3.1.2 | |
Oracle Corporate Time Outlook Connector | =3.3 | |
Oracle HTTP Server | =9.0.1 | |
Oracle HTTP Server | =9.2.0 | |
Apple iOS and macOS | =10.0 | |
Apple iOS and macOS | =10.0.1 | |
Apple iOS and macOS | =10.0.2 | |
Apple iOS and macOS | =10.0.3 | |
Apple iOS and macOS | =10.0.4 | |
Apple iOS and macOS | =10.1 | |
Apple iOS and macOS | =10.1.1 | |
Apple iOS and macOS | =10.1.2 | |
Apple iOS and macOS | =10.1.3 | |
Apple iOS and macOS | =10.1.4 | |
Apple iOS and macOS | =10.1.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0655 is considered a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
To fix CVE-2002-0655, upgrade to a version of OpenSSL that is later than 0.9.6d or 0.9.7-beta2.
CVE-2002-0655 affects OpenSSL versions 0.9.6d and earlier as well as 0.9.7-beta2 and earlier on 64-bit platforms.
CVE-2002-0655 can be exploited to create a denial of service condition or to execute arbitrary code remotely.
CVE-2002-0655 primarily affects outdated versions of OpenSSL and thus is less relevant to modern systems using updated libraries.