CVE-2000-1254: crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of...

Security readout for executives and security teams

This CVE concerns old OpenSSL RSA key generation on 64-bit HP-UX. Some keys generated by affected versions could be weaker than intended, reducing the trustworthiness of encryption or authentication that depends on those keys. The main concern is long-lived legacy keys that may still be trusted today. Exposure appears narrow: organizations that used OpenSSL before 0.9.6 on 64-bit HP-UX to generate RSA keys, especially keys still used for TLS, SSH, signing, or internal PKI. Modern systems are unlikely to be directly affected unless they still trust such legacy keys. Treat this as a legacy cryptographic hygiene issue. Prioritize if the organization historically used 64-bit HP-UX or still relies on old RSA keys. If no such platform or key provenance exists, urgency is lower, but documenting that conclusion matters. Mitigation focus: Inventory RSA keys generated on 64-bit HP-UX with OpenSSL before 0.9.6.; Regenerate and replace affected RSA keys using a supported, fixed cryptographic library.; Reissue certificates or credentials tied to any suspect keys..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.