CVE-2002-0656
OpenSSL 0.9.6d and earlier, 0.9.7-beta2 and earlier - Remote Code Execution via Large Client Master Key or Session ID
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-0656. PoCs published by Solar Eclipse.
AI-analyzed exploit summary This is a functional remote exploit for CVE-2002-0656, targeting the KEY_ARG buffer overflow in OpenSSL 0.9.6d and earlier. It leverages the vulnerability to achieve remote code execution with the privileges of the server process (e.g., nobody for Apache, root for other services).
Description
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
Exploits (1)
This is a functional remote exploit for CVE-2002-0656, targeting the KEY_ARG buffer overflow in OpenSSL 0.9.6d and earlier. It leverages the vulnerability to achieve remote code execution with the privileges of the server process (e.g., nobody for Apache, root for other services).