Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2003-0147 | First vendor Publication | 2003-03-31 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal). |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0147 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:466 | |||
| Oval ID: | oval:org.mitre.oval:def:466 | ||
| Title: | OpenSSL No RSA Blinding Vulnerability | ||
| Description: | OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal). | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2003-0147 | Version: | 2 |
| Platform(s): | Red Hat Linux 9 | Product(s): | OpenSSL |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-05-05 | Name : HP-UX Update for ApacheStrong HPSBUX00255 File : nvt/gb_hp_ux_HPSBUX00255.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 288-1 (openssl) File : nvt/deb_288_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 3948 | Multiple SSL/TLS Implementation Non-RSA Blinding Private Key Disclosure Multiple SSL/TLS implementations contain a flaw that may allow a malicious user to recover the RSA secret. It is possible that the flaw may allow an attacker to guess the private key. resulting in a loss of confidentiality, integrity, and/or availability. |
| 3947 | OpenSSL Non-RSA Blinding Private Key Disclosure OpenSSL contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered because RSA blinding is not enabled by default, which will disclose private key information resulting in a loss of confidentiality. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2004-09-29 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-288.nasl - Type : ACT_GATHER_INFO |
| 2004-07-31 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2003-035.nasl - Type : ACT_GATHER_INFO |
| 2004-07-06 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2003-102.nasl - Type : ACT_GATHER_INFO |
| 2003-02-20 | Name : The remote host has an application that is affected by multiple vulnerabilities. File : openssl_password_interception.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:23:34 |
|
| 2024-11-28 12:05:31 |
|
| 2024-08-02 12:02:27 |
|
| 2024-08-02 01:01:24 |
|
| 2024-02-02 01:02:14 |
|
| 2024-02-01 12:01:26 |
|
| 2023-09-05 12:02:07 |
|
| 2023-09-05 01:01:17 |
|
| 2023-09-02 12:02:09 |
|
| 2023-09-02 01:01:17 |
|
| 2023-08-12 12:02:37 |
|
| 2023-08-12 01:01:17 |
|
| 2023-08-11 12:02:14 |
|
| 2023-08-11 01:01:19 |
|
| 2023-08-06 12:02:03 |
|
| 2023-08-06 01:01:18 |
|
| 2023-08-04 12:02:07 |
|
| 2023-08-04 01:01:19 |
|
| 2023-07-14 12:02:05 |
|
| 2023-07-14 01:01:19 |
|
| 2023-03-29 01:02:04 |
|
| 2023-03-28 12:01:24 |
|
| 2022-10-11 12:01:52 |
|
| 2022-10-11 01:01:11 |
|
| 2021-05-04 12:01:57 |
|
| 2021-04-22 01:02:07 |
|
| 2020-05-23 00:15:21 |
|
| 2019-03-18 12:00:54 |
|
| 2018-10-19 21:19:35 |
|
| 2018-05-03 09:19:25 |
|
| 2016-10-18 12:01:09 |
|
| 2016-04-26 12:30:40 |
|
| 2014-02-17 10:25:53 |
|
| 2013-05-11 11:50:39 |
|
