CVE-2002-2207 Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.
HighCVSS 10.0
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eric rescorla ssldump | = 0.9b1 | No fix listed |
| eric rescorla ssldump | = 0.9b2 | No fix listed |
| debian/ssldump(Debian:12) | < 0.9b3 | 0.9b3 |
| debian/ssldump(Debian:13) | < 0.9b3 | 0.9b3 |
| debian/ssldump(Debian:14) | < 0.9b3 | 0.9b3 |
References
- ssldump-rsa-premastersecret-bo(10086) patch vdb-entry
- www.rtfm.com patch
- 20020911 Buffer over/underflows in ssldump prior to 0.9b3 mailing-list
- 5690 patch vdb-entry
- Debian Security Tracker CVE-2002-2207 vendor-advisory