OpenSSL Other Vulnerability - CVE-2003-0131 - Vulnerability Database

OpenSSL Other Vulnerability - CVE-2003-0131

High

Reference: CVE-2003-0131

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2003-0131

Title: OpenSSL Other Vulnerability

Overview:

The SSL and TLS components for OpenSSL 0.9.6i and earlier 0.9.7 and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS 1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext aka the quotKlima-Pokorny-Rosa attack.quot