CVE-2000-1254

CVE-2000-1254 describes a critical vulnerability in OpenSSL versions prior to 0.9.6, specifically affecting the crypto/rsa/rsa_gen.c component. This flaw, rated 7.5 HIGH on the CVSS scale, stems from improper handling of C bitwise-shift operations exceeding expression size, making RSA key generation on 64-bit HP-UX platforms susceptible to cryptographic defeat. While the attack vector is network-based with low complexity and no user interaction, leading to high confidentiality impact, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion.