CVE-2002-0656

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

89.82% chance of exploitation in the next 30 days, 100th percentile

Published

2002-07-31

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40347

References

• CVE Record
• NVD entry

Related

• CVE-2002-0654
• CVE-2002-0658
• CVE-2002-0653
• CVE-2002-0659
• CVE-2002-0652
• CVE-2002-0661