CVE-2002-0656
Fixed in a distro release EPSS 90%
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
Products: openssl, oracle application_server, oracle corporate_time_outlook_connector, oracle http_server, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 0.9.6e-1 |
| Debian 13 | openssl | 0.9.6e-1 |
| Debian 14 | openssl | 0.9.6e-1 |
| Debian 3.0 | openssl | 0.9.6c-2.woody.0 |
| Debian 3.0 | openssl | 0.9.6c-2.woody.1 |
| Debian 3.0 | openssl094 | 0.9.4-6.woody.0 |
| Debian 3.0 | openssl094 | 0.9.4-6.woody.1 |
| Debian 3.0 | openssl094 | 0.9.4-6.woody.2 |
| Debian 3.0 | openssl095 | 0.9.5a-6.woody.0 |
| Debian 3.0 | openssl095 | 0.9.5a-6.woody.1 |