CVE-2004-0079

Fixed in a distro release EPSS 10%CVSS 7.5

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

Published 2004-03-18 · CVE record · OSV

Products: ciscoworks_common_management_foundation, ciscoworks_common_services, apple mac_os_x, apple mac_os_x_server, freebsd, hp-ux, openbsd, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat linux, sco openserver, cisco ios, 4d webstar, avaya intuity_audix, avaya vsu, checkpoint firewall-1, checkpoint provider-1, checkpoint vpn-1, cisco access_registrar, cisco application_and_content_networking_software, cisco css_secure_content_accelerator, cisco css11000_content_services_switch, cisco okena_stormwatch, cisco pix_firewall, cisco threat_response, cisco webns, dell bsafe_ssl-j, hp wbem, speed_technologies_litespeed_web_server, neoteris instant_virtual_extranet, novell edirectory, novell imanager, openssl, redhat openssl, sgi propack, stonesoft servercluster, stonesoft stonebeat_fullcluster, stonesoft stonebeat_securitycluster, stonesoft stonebeat_webcluster, stonesoft stonegate, stonesoft stonegate_vpn_client, tarantella_enterprise, vmware gsx_server, bluecoat cacheos_ca_sa, cisco pix_firewall_software

Distro releases