Description

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.

Remediation

References

CVE-2002-0656

Related Vulnerabilities

TYPO3 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2010-3668)

Joomla! Core 2.5.x Cross-Site Scripting (2.5.0 - 2.5.18)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (3.4.7)

Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-7930)

Oracle HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2022-25235)

Severity

High

Classification

CVE-2002-0656

Tags

Missing Update Known Vulnerabilities