TI-2003-00074 Aliases CVE-2003-0078 GHSA-2x68-h5x4-c4qp

ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not…

LOW 38CWE-203Published 2004-09-01 · Updated 2024-08-08

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: Partial · None · None
Fix status: Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-203.

Summary

ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."

Why it matters now

EPSS 0.13718 96th percentileScored 2026-11-07

Fix Fixed Red Hat: 5 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 18

CPE	Versions	Role	Vendor
cpe:2.3:a:openssl:openssl::::::::	before 0.9.6i	Vulnerable	OpenSSL
cpe:2.3:a:openssl:openssl:0.9.6i:::::::*	0.9.6i	Vulnerable	OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:-::::::	0.9.7	Vulnerable	OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta1::::::	0.9.7 beta1	Vulnerable	OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta2::::::	0.9.7 beta2	Vulnerable	OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta3::::::	0.9.7 beta3	Vulnerable	OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta4::::::	0.9.7 beta4	Vulnerable	OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta5::::::	0.9.7 beta5	Vulnerable	OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta6::::::	0.9.7 beta6	Vulnerable	OpenSSL
cpe:2.3:o:freebsd:freebsd:4.2:::::::*	4.2	Vulnerable	FreeBSD

cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions before 0.9.6i Vulnerable ·OpenSSL
cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:* Versions 0.9.6i Vulnerable ·OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:-:*:*:*:*:*:* Versions 0.9.7 Vulnerable ·OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:* Versions 0.9.7 beta1 Vulnerable ·OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:* Versions 0.9.7 beta2 Vulnerable ·OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:* Versions 0.9.7 beta3 Vulnerable ·OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:* Versions 0.9.7 beta4 Vulnerable ·OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:* Versions 0.9.7 beta5 Vulnerable ·OpenSSL
cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:* Versions 0.9.7 beta6 Vulnerable ·OpenSSL
cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·FreeBSD

Show 8 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:freebsd:freebsd:4.3:::::::*	4.3	Vulnerable	FreeBSD
cpe:2.3:o:freebsd:freebsd:4.4:::::::*	4.4	Vulnerable	FreeBSD
cpe:2.3:o:freebsd:freebsd:4.5:::::::*	4.5	Vulnerable	FreeBSD
cpe:2.3:o:freebsd:freebsd:4.6:::::::*	4.6	Vulnerable	FreeBSD
cpe:2.3:o:freebsd:freebsd:4.7:::::::*	4.7	Vulnerable	FreeBSD
cpe:2.3:o:freebsd:freebsd:5.0:::::::*	5.0	Vulnerable	FreeBSD
cpe:2.3:o:openbsd:openbsd:3.1:::::::*	3.1	Vulnerable	OpenBSD
cpe:2.3:o:openbsd:openbsd:3.2:::::::*	3.2	Vulnerable	OpenBSD

cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·FreeBSD
cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·FreeBSD
cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·FreeBSD
cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·FreeBSD
cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:* Versions 4.7 Vulnerable ·FreeBSD
cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·FreeBSD
cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·OpenBSD
cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·OpenBSD

Remediation

Red Hat 5 advisories

RHSA-2003:205 Released 2003-06-23 · Red Hat rating Important
: : : Updated OpenSSL packages fix vulnerabilities
- Red Hat Linux 7.1
RHSA-2003:104 Released 2003-03-18 · Red Hat rating Important
apache, openssl, php security update for Stronghold
- Red Hat Stronghold 3
RHSA-2003:063 Released 2003-03-10 · Red Hat rating Moderate
openssl security update
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1
- Red Hat Enterprise Linux ES version 2.1
- Red Hat Enterprise Linux WS version 2.1
- Red Hat Linux Advanced Workstation 2.1

Show 2 more Red Hat advisories

RHSA-2003:062 Released 2003-03-06 · Red Hat rating Moderate
: Updated OpenSSL packages fix timing attack
- Red Hat Linux 6.2
- Red Hat Linux 7.0
- Red Hat Linux 7.1
- Red Hat Linux 7.2
- Red Hat Linux 7.3
- Red Hat Linux 8.0
RHSA-2003:082 Released 2003-03-03 · Red Hat rating Important
apache, openssl, php, tomcat security update for Stronghold
- Red Hat Stronghold 4

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	Fixed	RHSA-2003:063
Red Hat Enterprise Linux ES version 2.1	Fixed	RHSA-2003:063
Red Hat Enterprise Linux WS version 2.1	Fixed	RHSA-2003:063
Red Hat Linux 6.2	Fixed	RHSA-2003:062
Red Hat Linux 7.0	Fixed	RHSA-2003:062
Red Hat Linux 7.1	Fixed	RHSA-2003:062
Red Hat Linux 7.2	Fixed	RHSA-2003:062
Red Hat Linux 7.3	Fixed	RHSA-2003:062
Red Hat Linux 8.0	Fixed	RHSA-2003:062
Red Hat Linux Advanced Workstation 2.1	Fixed	RHSA-2003:063
Red Hat Stronghold 3	Fixed	RHSA-2003:104
Red Hat Stronghold 4	Fixed	RHSA-2003:082

Timeline

2026-10-02 Threatist record created from CVE-2003-0078
2026-10-03 Alias added: GHSA-2x68-h5x4-c4qp

References

Patch 1

http://www.openssl.org/news/secadv_20030219.txt

Advisory 15

Other 1

3945

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences