CVEvulnerability

CVE-2004-0079

7.5 HIGH Published 2004-11-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-11-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-476

Description

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

Affected configurations

• cisco firewall services module • cisco firewall services module 1.1.2 • cisco firewall services module 1.1.3 • cisco firewall services module 1.1 \(3.005\) • cisco firewall services module 2.1 \(0.208\) • hp aaa server • hp apache-based web server 2.0.43.00 • hp apache-based web server 2.0.43.04 • symantec clientless vpn gateway 4400 5.0 • cisco ciscoworks common management foundation 2.1 • cisco ciscoworks common services 2.2 • avaya converged communications server 2.0 • avaya sg200 4.4 • avaya sg200 4.31.29 • avaya sg203 4.4 • avaya sg203 4.31.29 • avaya sg208 • avaya sg208 4.4 • avaya sg5 4.2 • avaya sg5 4.3 • avaya sg5 4.4 • apple mac os x 10.3.3 • apple mac os x server 10.3.3 • freebsd freebsd 4.8 • freebsd freebsd 4.9 • freebsd freebsd 5.1 • freebsd freebsd 5.2 • freebsd freebsd 5.2.1 • hp hp-ux 8.05 • hp hp-ux 11.00 • hp hp-ux 11.11 • hp hp-ux 11.23 • openbsd openbsd 3.3 • openbsd openbsd 3.4 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • redhat linux 7.2 • redhat linux 7.3 • redhat linux 8.0 • sco openserver 5.0.6 • sco openserver 5.0.7 • cisco ios 12.1\(11\)e • cisco ios 12.1\(11b\)e • cisco ios 12.1\(11b\)e12 • cisco ios 12.1\(11b\)e14 • cisco ios 12.1\(13\)e9 • cisco ios 12.1\(19\)e1 • cisco ios 12.2\(14\)sy • cisco ios 12.2\(14\)sy1 • cisco ios 12.2sy • cisco ios 12.2za • 4d webstar 4.0 • 4d webstar 5.2 • 4d webstar 5.2.1 • 4d webstar 5.2.2 • 4d webstar 5.2.3 • 4d webstar 5.2.4 • 4d webstar 5.3 • 4d webstar 5.3.1 • avaya intuity audix … and 177 more

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

Referenced by CWE · observed example (1)

  • CWE-476 NULL Pointer Dereference weakness

References