CVE-2003-0147 in OpenSSL
要約 (英語)
OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server s private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).
公開
2003年03月31日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 16 | OpenSSL RSA Key Handling | 未定義 | 公式な修正 | CVE-2003-0147 |