CVE-2003-0147: Medium severity Stunnel Stunnel vulnerability

Published Mar 18, 2003

Updated

OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).

Affected Software

35 affected components

Stunnel Stunnel=4.02

OpenSSL OpenSSL=0.9.6i

Stunnel Stunnel=3.7

OpenSSL OpenSSL=0.9.6d

OpenSSL OpenSSL=0.9.6

OpenSSL OpenSSL=0.9.6a

Stunnel Stunnel=3.14

Stunnel Stunnel=3.22

Stunnel Stunnel=3.18

OpenSSL OpenSSL=0.9.6h

OpenSSL OpenSSL=0.9.7

Stunnel Stunnel=3.15

Stunnel Stunnel=3.16

Stunnel Stunnel=3.8

Stunnel Stunnel=3.11

Stunnel Stunnel=3.12

Stunnel Stunnel=3.20

Openpkg Openpkg=1.1

OpenSSL OpenSSL=0.9.6e

OpenSSL OpenSSL=0.9.6g

Stunnel Stunnel=3.13

Stunnel Stunnel=3.21

Stunnel Stunnel=4.04

OpenSSL OpenSSL=0.9.6b

Stunnel Stunnel=3.10

Stunnel Stunnel=3.17

Stunnel Stunnel=3.9

Openpkg Openpkg=1.2

OpenSSL OpenSSL=0.9.6c

Stunnel Stunnel=3.19

Stunnel Stunnel=4.01

Openpkg Openpkg

Stunnel Stunnel=4.03

OpenSSL OpenSSL=0.9.7a

Stunnel Stunnel=4.0

Event History

Mar 18, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Mar 31, 2003

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0147?

CVE-2003-0147 is considered high severity as it allows attackers to potentially obtain the private key of a server.

How do I fix CVE-2003-0147?

To fix CVE-2003-0147, upgrade OpenSSL to a version that implements RSA blinding by default.

What versions of OpenSSL are affected by CVE-2003-0147?

CVE-2003-0147 affects OpenSSL versions up to and including 0.9.7.

Is Stunnel affected by CVE-2003-0147?

Yes, Stunnel versions up to 4.02 are affected by CVE-2003-0147.

What kind of attacks can exploit CVE-2003-0147?

CVE-2003-0147 can be exploited through timing attacks that reveal information about the server's private key.