CVE-2002-0655
Fixed in a distro release EPSS 8%
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
Products: openssl, oracle application_server, oracle corporate_time_outlook_connector, oracle http_server, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 0.9.6e-1 |
| Debian 13 | openssl | 0.9.6e-1 |
| Debian 14 | openssl | 0.9.6e-1 |
| Debian 3.0 | openssl | 0.9.6c-2.woody.0 |
| Debian 3.0 | openssl | 0.9.6c-2.woody.1 |
| Debian 3.0 | openssl094 | 0.9.4-6.woody.0 |
| Debian 3.0 | openssl094 | 0.9.4-6.woody.1 |
| Debian 3.0 | openssl094 | 0.9.4-6.woody.2 |
| Debian 3.0 | openssl095 | 0.9.5a-6.woody.0 |
| Debian 3.0 | openssl095 | 0.9.5a-6.woody.1 |