AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2003-0131

HIGH · CVSS 7.5 EPSS 6.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-03-24 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects OpenSSL. It may be remotely exploitable.

CVE
CVE-2003-0131
Severity
HIGH
CVSS
7.5
EPSS
6.28%
OpenSSL

Original NVD Description

The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."