Back to CVE Browser

CVE-2002-2207

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1020%

EPSS Percentile0.17th

PublishedDec 31, 2002

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.

Affected Platforms (CPE)

📦

Eric Rescorla

Ssldump

= 0.9b1

📦

Eric Rescorla

Ssldump

= 0.9b2

References & Advisories

🔗 http://www.iss.net/security_center/static/10086.php

🔗 http://www.rtfm.com/ssldump/

🔗 http://www.securityfocus.com/archive/1/291329

🔗 http://www.securityfocus.com/bid/5690

🔗 http://www.iss.net/security_center/static/10086.php

🔗 http://www.rtfm.com/ssldump/

🔗 http://www.securityfocus.com/archive/1/291329

🔗 http://www.securityfocus.com/bid/5690

Related Vulnerabilities

CVE-2001-003210.0

Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privil...

CVE-2002-222710.0

Buffer underflow in ssldump 0.9b2 and earlier allows remote attackers to cause a denial of service (memory corruption) via a craft...

CVE-2018-55194.9

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit ...

CVE-2002-074710.0

Buffer overflow in lsmcode in AIX 4.3.3.