CVE-2002-0659: Medium severity OpenSSL OpenSSL vulnerability
Published Jul 31, 2002
·Updated
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
Affected Software
34 affected components
OpenSSL OpenSSL=0.9.1c
OpenSSL OpenSSL=0.9.2b
OpenSSL OpenSSL=0.9.3
OpenSSL OpenSSL=0.9.4
OpenSSL OpenSSL=0.9.5
OpenSSL OpenSSL=0.9.5a
OpenSSL OpenSSL=0.9.6
OpenSSL OpenSSL=0.9.6a
OpenSSL OpenSSL=0.9.6b
OpenSSL OpenSSL=0.9.6c
OpenSSL OpenSSL=0.9.6d
OpenSSL OpenSSL=0.9.7-beta1
OpenSSL OpenSSL=0.9.7-beta2
Oracle Application Server
Oracle Application Server=1.0.2
Oracle Application Server=1.0.2.1s
Oracle Application Server=1.0.2.2
Oracle Corporate Time Outlook Connector=3.1
Oracle Corporate Time Outlook Connector=3.1.1
Oracle Corporate Time Outlook Connector=3.1.2
Oracle Corporate Time Outlook Connector=3.3
Oracle HTTP Server=9.0.1
Oracle HTTP Server=9.2.0
Apple iOS and macOS=10.0
Apple iOS and macOS=10.0.1
Apple iOS and macOS=10.0.2
Apple iOS and macOS=10.0.3
Apple iOS and macOS=10.0.4
Apple iOS and macOS=10.1
Apple iOS and macOS=10.1.1
Apple iOS and macOS=10.1.2
Apple iOS and macOS=10.1.3
Apple iOS and macOS=10.1.4
Apple iOS and macOS=10.1.5
Event History
Jul 31, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0659?
CVE-2002-0659 has been classified as a denial of service vulnerability, impacting systems using specific versions of OpenSSL.
2
How do I fix CVE-2002-0659?
To fix CVE-2002-0659, upgrade to a version of OpenSSL that is later than 0.9.6d or 0.9.7-beta2.
3
What systems are affected by CVE-2002-0659?
CVE-2002-0659 affects multiple versions of OpenSSL, including 0.9.1c through 0.9.6d and 0.9.7-beta2.
4
Can CVE-2002-0659 cause system crashes?
Yes, CVE-2002-0659 can be exploited by attackers to cause a denial of service, potentially crashing the affected service.
5
Who is responsible for addressing CVE-2002-0659?
The responsibility falls on system administrators and organizations using the affected OpenSSL versions to apply necessary updates.