CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0147

OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.243

EPSS Ranking 95.8%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2003-0147

Openpkg » Openpkg » Version: N/A

cpe:2.3:a:openpkg:openpkg:-
Openpkg » Openpkg » Version: 1.0

cpe:2.3:a:openpkg:openpkg:1.0
Openpkg » Openpkg » Version: 1.1

cpe:2.3:a:openpkg:openpkg:1.1
Openpkg » Openpkg » Version: 1.1.0

cpe:2.3:a:openpkg:openpkg:1.1.0
Openpkg » Openpkg » Version: 1.2

cpe:2.3:a:openpkg:openpkg:1.2
Openpkg » Openpkg » Version: 1.2.0

cpe:2.3:a:openpkg:openpkg:1.2.0
Openpkg » Openpkg » Version: 1.3

cpe:2.3:a:openpkg:openpkg:1.3
Openpkg » Openpkg » Version: 1.3.3

cpe:2.3:a:openpkg:openpkg:1.3.3
Openpkg » Openpkg » Version: 1.3.5

cpe:2.3:a:openpkg:openpkg:1.3.5
Openpkg » Openpkg » Version: 2.0

cpe:2.3:a:openpkg:openpkg:2.0
Openpkg » Openpkg » Version: 2.1

cpe:2.3:a:openpkg:openpkg:2.1
Openpkg » Openpkg » Version: 2.2

cpe:2.3:a:openpkg:openpkg:2.2
Openpkg » Openpkg » Version: 2.5

cpe:2.3:a:openpkg:openpkg:2.5
Openssl » Openssl » Version: 0.9.6

cpe:2.3:a:openssl:openssl:0.9.6
Openssl » Openssl » Version: 0.9.6a

cpe:2.3:a:openssl:openssl:0.9.6a
Openssl » Openssl » Version: 0.9.6b

cpe:2.3:a:openssl:openssl:0.9.6b
Openssl » Openssl » Version: 0.9.6c

cpe:2.3:a:openssl:openssl:0.9.6c
Openssl » Openssl » Version: 0.9.6d

cpe:2.3:a:openssl:openssl:0.9.6d
Openssl » Openssl » Version: 0.9.6e

cpe:2.3:a:openssl:openssl:0.9.6e
Openssl » Openssl » Version: 0.9.6g

cpe:2.3:a:openssl:openssl:0.9.6g
Openssl » Openssl » Version: 0.9.6h

cpe:2.3:a:openssl:openssl:0.9.6h
Openssl » Openssl » Version: 0.9.6i

cpe:2.3:a:openssl:openssl:0.9.6i
Openssl » Openssl » Version: 0.9.7

cpe:2.3:a:openssl:openssl:0.9.7
Openssl » Openssl » Version: 0.9.7a

cpe:2.3:a:openssl:openssl:0.9.7a
Stunnel » Stunnel » Version: 3.10

cpe:2.3:a:stunnel:stunnel:3.10
Stunnel » Stunnel » Version: 3.11

cpe:2.3:a:stunnel:stunnel:3.11
Stunnel » Stunnel » Version: 3.12

cpe:2.3:a:stunnel:stunnel:3.12
Stunnel » Stunnel » Version: 3.13

cpe:2.3:a:stunnel:stunnel:3.13
Stunnel » Stunnel » Version: 3.14

cpe:2.3:a:stunnel:stunnel:3.14
Stunnel » Stunnel » Version: 3.15

cpe:2.3:a:stunnel:stunnel:3.15
Stunnel » Stunnel » Version: 3.16

cpe:2.3:a:stunnel:stunnel:3.16
Stunnel » Stunnel » Version: 3.17

cpe:2.3:a:stunnel:stunnel:3.17
Stunnel » Stunnel » Version: 3.18

cpe:2.3:a:stunnel:stunnel:3.18
Stunnel » Stunnel » Version: 3.19

cpe:2.3:a:stunnel:stunnel:3.19
Stunnel » Stunnel » Version: 3.20

cpe:2.3:a:stunnel:stunnel:3.20
Stunnel » Stunnel » Version: 3.21

cpe:2.3:a:stunnel:stunnel:3.21
Stunnel » Stunnel » Version: 3.22

cpe:2.3:a:stunnel:stunnel:3.22
Stunnel » Stunnel » Version: 3.7

cpe:2.3:a:stunnel:stunnel:3.7
Stunnel » Stunnel » Version: 3.8

cpe:2.3:a:stunnel:stunnel:3.8
Stunnel » Stunnel » Version: 3.9

cpe:2.3:a:stunnel:stunnel:3.9
Stunnel » Stunnel » Version: 4.0

cpe:2.3:a:stunnel:stunnel:4.0
Stunnel » Stunnel » Version: 4.01

cpe:2.3:a:stunnel:stunnel:4.01
Stunnel » Stunnel » Version: 4.02

cpe:2.3:a:stunnel:stunnel:4.02
Stunnel » Stunnel » Version: 4.03

cpe:2.3:a:stunnel:stunnel:4.03
Stunnel » Stunnel » Version: 4.04

cpe:2.3:a:stunnel:stunnel:4.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0147

Products

Pricing

Contact Us