CVE:CVE-2002-0659
CNNVD:CNNVD-200208-052
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL的ASN1解释器在处理无效的编码方式时存在漏洞，远程攻击者可能利用此漏洞对使用了ASN1库的应用程序进行拒绝服务攻击。
solution:Upgrade openssl openssl to a higher version than 0.9.1c,0.9.2b,0.9.3,0.9.4,0.9.5,0.9.5a,0.9.6,0.9.6a,0.9.6b,0.9.6c,0.9.6d,0.9.7:beta1,0.9.7:beta2,and avoid the version 0.9.1c,0.9.2b,0.9.3,0.9.4,0.9.5,0.9.5a,0.9.6,0.9.6a,0.9.6b,0.9.6c,0.9.6d,0.9.7:beta1,0.9.7:beta2; Upgrade oracle application_server to a higher version than *,1.0.2,1.0.2.1s,1.0.2.2,and avoid the version 1.0.2,1.0.2.1s,1.0.2.2; Upgrade oracle corporate_time_outlook_connector to a higher version than 3.1,3.1.1,3.1.2,3.3,and avoid the version 3.1,3.1.1,3.1.2,3.3; Upgrade oracle http_server to a higher version than 9.0.1,9.2.0,and avoid the version 9.0.1,9.2.0; Upgrade apple mac_os_x to a higher version than 10.0,10.0.1,10.0.2,10.0.3,10.0.4,10.1,10.1.1,10.1.2,10.1.3,10.1.4,10.1.5,and avoid the version 10.0,10.0.1,10.0.2,10.0.3,10.0.4,10.1,10.1.1,10.1.2,10.1.3,10.1.4,10.1.5