CVE-2004-0081

Fixed in a distro release EPSS 7%

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

Published 2004-03-18 · CVE record · OSV

Products: ciscoworks_common_management_foundation, ciscoworks_common_services, apple mac_os_x, apple mac_os_x_server, freebsd, hp-ux, openbsd, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat linux, sco openserver, cisco ios, 4d webstar, avaya intuity_audix, avaya vsu, checkpoint firewall-1, checkpoint provider-1, checkpoint vpn-1, cisco access_registrar, cisco application_and_content_networking_software, cisco css_secure_content_accelerator, cisco css11000_content_services_switch, cisco okena_stormwatch, cisco pix_firewall, cisco threat_response, cisco webns, dell bsafe_ssl-j, hp wbem, speed_technologies_litespeed_web_server, neoteris instant_virtual_extranet, novell edirectory, novell imanager, openssl, redhat openssl, sgi propack, stonesoft servercluster, stonesoft stonebeat_fullcluster, stonesoft stonebeat_securitycluster, stonesoft stonebeat_webcluster, stonesoft stonegate, stonesoft stonegate_vpn_client, tarantella_enterprise, vmware gsx_server, bluecoat cacheos_ca_sa, cisco pix_firewall_software

Distro releases