CVE-2003-0851: Cisco CSS11000 Content Services Switch

Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days.

OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.

Affected products

• Cisco CSS11000 Content Services Switch: any version
• Cisco IOS: version 12.1(11)e only; version 12.1(11b)e only; version 12.2sx only; version 12.2sy only
• Cisco Pix Firewall: version 6.2.2_.111 only
• Cisco Pix Firewall Software: version 6.0 only; version 6.0(1) only; version 6.0(2) only; version 6.0(3) only; version 6.0(4) only; version 6.0(4.101) only; …
• OpenSSL OpenSSL: version 0.9.6 only; version 0.9.6a only; version 0.9.6b only; version 0.9.6c only; version 0.9.6d only; version 0.9.6e only; …

Published 2003-12-01. Last modified 2026-06-16.