Back to Database
Status published
Medium
CVE-2003-0851
OpenSSL 0.9.6k allows remote attackers to cause a denial of...
Vulnerability Description
OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0851
Credits & Attribution
No credits recorded in the NVD database.
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5528
- http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html
- ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc
- http://secunia.com/advisories/17381
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-003.txt.asc
- http://www.cisco.com/warp/public/707/cisco-sa-20030930-ssl.shtml
- http://www.securityfocus.com/bid/8970
- http://marc.info/?l=bugtraq&m=106796246511667&w=2
- http://rhn.redhat.com/errata/RHSA-2004-119.html
- http://www.openssl.org/news/secadv_20031104.txt
- http://www.kb.cert.org/vuls/id/412478
- http://marc.info/?l=bugtraq&m=108403850228012&w=2
More from cisco
View All →CVE-2025-27091
OpenH264 Decoding Functions Heap Overflow Vulnerability
High
8.6
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
High
7.5
CVE-2021-33478
The TrustZone implementation in certain Broadcom MediaxChange firmware could allow...
Medium
6.8
CVE-2020-16139
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0...
High
7.5
CVE-2020-16138
A denial-of-service issue in Cisco Unified IP Conference Station 7937G...
High
7.5
Affected Vendor
cisco
View all reports →Affected Software
ios, css11000 content services switch, pix firewall, openssl, pix firewall software
Vulnerable Versions:
12.1\(11\)e, 12.1\(11b\)e, 12.2sx, 12.2sy, 6.2.2_.111, 0.9.6, 0.9.6a, 0.9.6b, 0.9.6c, 0.9.6d, 0.9.6e, 0.9.6f, 0.9.6g, 0.9.6h, 0.9.6i, 0.9.6j, 0.9.6k, 0.9.7, 0.9.7a, 0.9.7b, 6.0, 6.0\(1\), 6.0\(2\), 6.0\(3\), 6.0\(4\), 6.0\(4.101\), 6.1, 6.1\(1\), 6.1\(2\), 6.1\(3\), 6.1\(4\), 6.1\(5\), 6.2, 6.2\(1\), 6.2\(2\), 6.2\(3\), 6.3\(1\), 6.3\(3.102\)
Timeline
Official Publish:
November 6th, 2003
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.