CVE ID:	CVE-2003-0544
Description:	OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
Test IDs:	1.3.6.1.4.1.25623.1.0.51027
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0544 BugTraq ID: 8732 http://www.securityfocus.com/bid/8732 Cert/CC Advisory: CA-2003-26 http://www.cert.org/advisories/CA-2003-26.html CERT/CC vulnerability note: VU#380864 http://www.kb.cert.org/vuls/id/380864 Debian Security Information: DSA-393 (Google Search) http://www.debian.org/security/2003/dsa-393 Debian Security Information: DSA-394 (Google Search) http://www.debian.org/security/2003/dsa-394 En Garde Linux Advisory: ESA-20030930-027 http://www.linuxsecurity.com/advisories/engarde_advisory-3693.html http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4574 RedHat Security Advisories: RHSA-2003:291 http://www.redhat.com/support/errata/RHSA-2003-291.html RedHat Security Advisories: RHSA-2003:292 http://www.redhat.com/support/errata/RHSA-2003-292.html http://secunia.com/advisories/22249 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1 http://www.vupen.com/english/advisories/2006/3900 XForce ISS Database: openssl-asn1-sslclient-dos(43041) https://exchange.xforce.ibmcloud.com/vulnerabilities/43041