CVE-2004-0112

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

• cisco firewall services module • cisco firewall services module 1.1.2 • cisco firewall services module 1.1.3 • cisco firewall services module 1.1 \(3.005\) • cisco firewall services module 2.1 \(0.208\) • hp aaa server • hp apache-based web server 2.0.43.00 • hp apache-based web server 2.0.43.04 • symantec clientless vpn gateway 4400 5.0 • cisco ciscoworks common management foundation 2.1 • cisco ciscoworks common services 2.2 • avaya converged communications server 2.0 • avaya sg200 4.4 • avaya sg200 4.31.29 • avaya sg203 4.4 • avaya sg203 4.31.29 • avaya sg208 • avaya sg208 4.4 • avaya sg5 4.2 • avaya sg5 4.3 • avaya sg5 4.4 • apple mac os x 10.3.3 • apple mac os x server 10.3.3 • freebsd freebsd 4.8 • freebsd freebsd 4.9 • freebsd freebsd 5.1 • freebsd freebsd 5.2 • freebsd freebsd 5.2.1 • hp hp-ux 8.05 • hp hp-ux 11.00 • hp hp-ux 11.11 • hp hp-ux 11.23 • openbsd openbsd 3.3 • openbsd openbsd 3.4 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • redhat linux 7.2 • redhat linux 7.3 • redhat linux 8.0 • sco openserver 5.0.6 • sco openserver 5.0.7 • cisco ios 12.1\(11\)e • cisco ios 12.1\(11b\)e • cisco ios 12.1\(11b\)e12 • cisco ios 12.1\(11b\)e14 • cisco ios 12.1\(13\)e9 • cisco ios 12.1\(19\)e1 • cisco ios 12.2\(14\)sy • cisco ios 12.2\(14\)sy1 • cisco ios 12.2sy • cisco ios 12.2za • 4d webstar 4.0 • 4d webstar 5.2 • 4d webstar 5.2.1 • 4d webstar 5.2.2 • 4d webstar 5.2.3 • 4d webstar 5.2.4 • 4d webstar 5.3 • 4d webstar 5.3.1 • avaya intuity audix … and 158 more