CVE-2003-0147 | BDVDB-2026-4969 Detail
Description#
OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.debian.org/security/2003/dsa-288
- http://www.redhat.com/support/errata/RHSA-2003-101.html
- http://www.redhat.com/support/errata/RHSA-2003-102.html
- http://www.openssl.org/news/secadv_20030317.txt
- http://marc.info/?l=bugtraq&m=104829040921835&w=2
- http://www.securityfocus.com/archive/1/316165/30/25370/threaded
- http://marc.info/?l=bugtraq&m=104792570615648&w=2
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:035
- http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf
- http://www.gentoo.org/security/en/glsa/glsa-200303-23.xml
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A466
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.019.html
- http://marc.info/?l=bugtraq&m=104861762028637&w=2
- http://www.securityfocus.com/archive/1/316577/30/25310/threaded
- http://marc.info/?l=bugtraq&m=104766550528628&w=2
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.