CVE-2003-0131

Impact:
Important
Public Date:
2003-03-19
Bugzilla:
1616975: CVE-2003-0131 security flaw

The MITRE CVE dictionary describes this issue as:

The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."

Find out more about CVE-2003-0131 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

Red Hat Enterprise Linux 4 and 5 are not vulnerable to this issue as they both contain a backported patch.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Linux 7.0 RHSA-2003:101 2003-04-01
Red Hat Linux 6.2 RHSA-2003:101 2003-04-01
Red Hat Stronghold 3 RHSA-2003:117 2003-04-15
Red Hat Stronghold 4 RHSA-2003:116 2003-03-28
Red Hat Linux 7.1 RHSA-2003:205 2003-06-23
Red Hat Linux 7.2 RHSA-2003:101 2003-04-01
Red Hat Linux 7.3 RHSA-2003:101 2003-04-01
Red Hat Enterprise Linux 2.1 RHSA-2003:102 2003-03-31
Red Hat Linux 8.0 RHSA-2003:101 2003-04-01
Red Hat Linux 7.1 RHSA-2003:101 2003-04-01
Red Hat Linux 9 RHSA-2003:101 2003-04-01

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.