CVE-2003-0131

CVE-2003-0131 describes a critical vulnerability in OpenSSL versions 0.9.6i and earlier, 0.9.7, and 0.9.7a. This flaw, known as the "Klima-Pokorny-Rosa attack," allows remote attackers to perform unauthorized RSA private key operations by exploiting a modified Bleichenbacher attack against the SSL/TLS components. The attack leverages a large number of connections using PKCS #1 v1.5 padding to leak information about the relationship between ciphertext and plaintext. This vulnerability carries a CVSS score of 7.5, indicating high severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to partial confidentiality, integrity, and availability compromise. The FAUCET Risk Score is 86/100, further emphasizing its critical nature. Despite its severity, there is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention in recent times.