CVE-2003-0545

Critical

Published: 17/11/2003(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

A double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.

Risk Assessment

Attackers can exploit this vulnerability to disrupt service operations and potentially gain control over the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update OpenSSL to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access attempts.

Original NVD description (English source)

Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.