CVE-2002-1568 | BDVDB-2026-5908 Detail

Description#

OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12003-10-08Record published in the CVE List.
2. Version 22024-08-08Most recent update recorded in the CVE List.