CVE-2002-1568
mediumPriorität · verfolgen · 21EPSS 0.028 · 86. PerzentilEUUSEPSS · bewertet 2026-10-27
OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
IMPORTANT: Because both client and server applications are affected by these vulnerabilities, we advise users to reboot their systems after installing these updates. Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:157
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (3)
Betroffene Produkte und Versionsbereiche.
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::as
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2002:157Red Hat Security Advisory: openssl security update2002-07-30csaf · redhat_csafUS
Updated OpenSSL packages are available which fix several serious buffer overflow vulnerabilities.
auch bekannt als (2)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (6)
Externe Belege — Patches, Meldungen, Analysen.
- http://cvs.openssl.org/chngview?cn=7659enisa_euvd
- http://marc.info/?l=bugtraq&m=106511018214983enisa_euvd
- http://www.ebitech.sk/patrik/SA/SA-20031002.txtenisa_euvd
- http://cvs.openssl.org/chngview?cn=7659PatchVendor Advisorynvd
- http://marc.info/?l=bugtraq&m=106511018214983nvd
- http://www.ebitech.sk/patrik/SA/SA-20031002.txtnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan