EDB-22264

functional

OpenSSL 0.9.x - CBC Error Information Leakage

view exploit source exploit_dbverifiedtype remoteauthor Martin Vuagnouxpublished 2003-02-19catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2003-0078USmedium5.0Exploit
ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an infor…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan