CVE-2002-0659: Apple Mac OS X

Medium severity, CVSS 5.0. EPSS: 36.2% chance of exploitation in the next 30 days.

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.

Affected products

• Apple Mac OS X: version 10.0 only; version 10.0.1 only; version 10.0.2 only; version 10.0.3 only; version 10.0.4 only; version 10.1 only; …
• OpenSSL OpenSSL: version 0.9.1c only; version 0.9.2b only; version 0.9.3 only; version 0.9.4 only; version 0.9.5 only; version 0.9.5a only; …
• Oracle Application Server: any version; version 1.0.2 only; version 1.0.2.1s only; version 1.0.2.2 only
• Oracle Corporate Time Outlook Connector: version 3.1 only; version 3.1.1 only; version 3.1.2 only; version 3.3 only
• Oracle HTTP Server: version 9.0.1 only; version 9.2.0 only

Published 2002-08-12. Last modified 2026-06-16.