CVE-2003-0131: openssl
- 3 references with an unsupported link type were hidden.
Vulnerability summary
CVE-2003-0131 is a high (CVSS 7.5) vulnerability in openssl. EPSS estimates a 6.94% chance of exploitation in the next 30 days, higher than 94% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 21-03-2003PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
6.94%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
+0.66 pp
From 6.28% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- openssl< 0.9.7b-1
Openssl1 product
- openssl0.9.6 | 0.9.6a | 0.9.6b | 0.9.6c | 0.9.6d | 0.9.6e | 0.9.6g | 0.9.6h | 0.9.6i | 0.9.7 | 0.9.7a
2 vendors · 2 products
References
21 links
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A461VDB EntrySignatureX Refsource OVAL
- lists.apple.com/mhonarc/security-announce/msg00028.htmlX Refsource CONFIRM
Show all 21 references
- www.linuxsecurity.com/advisories/immunix_advisory-3066.htmlX Refsource MISC
- www.openssl.org/news/secadv_20030319.txtX Refsource CONFIRM