CVE-2004-0079

EPSS 9.54%
Veröffentlicht 23.11.2004 05:00:00
Zuletzt bearbeitet 16.06.2026 22:04:53
Erkennungen
Login

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 48

NVD 224 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Firewall Services Module

Cisco ≫ Firewall Services Module Version 1.1.2

Cisco ≫ Firewall Services Module Version 1.1.3

Hp ≫ Aaa Server

Hp ≫ Apache-based Web Server Version 2.0.43.00

Hp ≫ Apache-based Web Server Version 2.0.43.04

Symantec ≫ Clientless Vpn Gateway 4400 Version 5.0

Cisco ≫ Ciscoworks Common Management Foundation Version 2.1

Cisco ≫ Ciscoworks Common Services Version 2.2

Avaya ≫ Converged Communications Server Version 2.0

Avaya ≫ Sg200 Version 4.4

Avaya ≫ Sg200 Version 4.31.29

Avaya ≫ Sg203 Version 4.4

Avaya ≫ Sg203 Version 4.31.29

Avaya ≫ Sg208

Avaya ≫ Sg208 Version 4.4

Avaya ≫ Sg5 Version 4.2

Avaya ≫ Sg5 Version 4.3

Avaya ≫ Sg5 Version 4.4

Apple ≫ macOS X Version 10.3.3

Apple ≫ macOS X Server Version 10.3.3

Freebsd ≫ Freebsd Version 4.8

Freebsd ≫ Freebsd Version 4.8 Update releng

Freebsd ≫ Freebsd Version 4.9

Freebsd ≫ Freebsd Version 5.1

Freebsd ≫ Freebsd Version 5.1 Update release

Freebsd ≫ Freebsd Version 5.1 Update releng

Freebsd ≫ Freebsd Version 5.2

Freebsd ≫ Freebsd Version 5.2.1 Update release

Hp ≫ Hp-ux Version 8.05

Hp ≫ Hp-ux Version 11.00

Hp ≫ Hp-ux Version 11.11

Hp ≫ Hp-ux Version 11.23

Openbsd ≫ Openbsd Version 3.3

Openbsd ≫ Openbsd Version 3.4

Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_server

Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 3.0 Edition workstation_server

Redhat ≫ Enterprise Linux Desktop Version 3.0

Redhat ≫ Linux Version 7.2

Redhat ≫ Linux Version 7.3

Redhat ≫ Linux Version 8.0

Sco ≫ Openserver Version 5.0.6

Sco ≫ Openserver Version 5.0.7

Cisco ≫ Ios Version 12.2sy

Cisco ≫ Ios Version 12.2za

4d ≫ Webstar Version 4.0

4d ≫ Webstar Version 5.2

4d ≫ Webstar Version 5.2.1

4d ≫ Webstar Version 5.2.2

4d ≫ Webstar Version 5.2.3

4d ≫ Webstar Version 5.2.4

4d ≫ Webstar Version 5.3

4d ≫ Webstar Version 5.3.1

Avaya ≫ Intuity Audix Edition lx

Avaya ≫ Intuity Audix Version 5.1.46

Avaya ≫ Intuity Audix Version s3210

Avaya ≫ Intuity Audix Version s3400

Avaya ≫ Vsu Version 5

Avaya ≫ Vsu Version 5x

Avaya ≫ Vsu Version 100_r2.0.1

Avaya ≫ Vsu Version 500

Avaya ≫ Vsu Version 2000_r2.0.1

Avaya ≫ Vsu Version 5000_r2.0.1

Avaya ≫ Vsu Version 7500_r2.0.1

Avaya ≫ Vsu Version 10000_r2.0.1

Checkpoint ≫ Firewall-1 Edition vsx-ng-ai

Checkpoint ≫ Firewall-1 Version 2.0 Edition gx

Checkpoint ≫ Firewall-1 Version next_generation_fp0

Checkpoint ≫ Firewall-1 Version next_generation_fp1

Checkpoint ≫ Firewall-1 Version next_generation_fp2

Checkpoint ≫ Provider-1 Version 4.1

Checkpoint ≫ Provider-1 Version 4.1 Update sp1

Checkpoint ≫ Provider-1 Version 4.1 Update sp2

Checkpoint ≫ Provider-1 Version 4.1 Update sp3

Checkpoint ≫ Provider-1 Version 4.1 Update sp4

Checkpoint ≫ Vpn-1 Version next_generation_fp0

Checkpoint ≫ Vpn-1 Version next_generation_fp1

Checkpoint ≫ Vpn-1 Version next_generation_fp2

Checkpoint ≫ Vpn-1 Version vsx_ng_with_application_intelligence

Cisco ≫ Access Registrar

Cisco ≫ Application And Content Networking Software

Cisco ≫ Css Secure Content Accelerator Version 1.0

Cisco ≫ Css Secure Content Accelerator Version 2.0

Cisco ≫ Css11000 Content Services Switch

Cisco ≫ Okena Stormwatch Version 3.2

Cisco ≫ Pix Firewall Version 6.2.2_.111

Cisco ≫ Threat Response

Cisco ≫ Webns Version 6.10

Cisco ≫ Webns Version 6.10_b4

Cisco ≫ Webns Version 7.1_0.1.02

Cisco ≫ Webns Version 7.1_0.2.06

Cisco ≫ Webns Version 7.2_0.0.03

Cisco ≫ Webns Version 7.10

Cisco ≫ Webns Version 7.10_.0.06s

Dell ≫ Bsafe Ssl-j Version 3.0

Dell ≫ Bsafe Ssl-j Version 3.0.1

Dell ≫ Bsafe Ssl-j Version 3.1

Hp ≫ Wbem Version a.01.05.08

Hp ≫ Wbem Version a.02.00.00

Hp ≫ Wbem Version a.02.00.01

Lite ≫ Speed Technologies Litespeed Web Server Version 1.0.1

Lite ≫ Speed Technologies Litespeed Web Server Version 1.0.2

Lite ≫ Speed Technologies Litespeed Web Server Version 1.0.3

Lite ≫ Speed Technologies Litespeed Web Server Version 1.1

Lite ≫ Speed Technologies Litespeed Web Server Version 1.1.1

Lite ≫ Speed Technologies Litespeed Web Server Version 1.2.1

Lite ≫ Speed Technologies Litespeed Web Server Version 1.2.2

Lite ≫ Speed Technologies Litespeed Web Server Version 1.2_rc1

Lite ≫ Speed Technologies Litespeed Web Server Version 1.2_rc2

Lite ≫ Speed Technologies Litespeed Web Server Version 1.3

Lite ≫ Speed Technologies Litespeed Web Server Version 1.3.1

Lite ≫ Speed Technologies Litespeed Web Server Version 1.3_rc1

Lite ≫ Speed Technologies Litespeed Web Server Version 1.3_rc2

Lite ≫ Speed Technologies Litespeed Web Server Version 1.3_rc3

Neoteris ≫ Instant Virtual Extranet Version 3.0

Neoteris ≫ Instant Virtual Extranet Version 3.1

Neoteris ≫ Instant Virtual Extranet Version 3.2

Neoteris ≫ Instant Virtual Extranet Version 3.3

Neoteris ≫ Instant Virtual Extranet Version 3.3.1

Novell ≫ Edirectory Version 8.0

Novell ≫ Edirectory Version 8.5

Novell ≫ Edirectory Version 8.5.12a

Novell ≫ Edirectory Version 8.5.27

Novell ≫ Edirectory Version 8.6.2

Novell ≫ Edirectory Version 8.7

Novell ≫ Edirectory Version 8.7.1

Novell ≫ Edirectory Version 8.7.1 Update sp1

Novell ≫ Imanager Version 1.5

Novell ≫ Imanager Version 2.0

OpenSSL ≫ OpenSSL Version 0.9.6c

OpenSSL ≫ OpenSSL Version 0.9.6d

OpenSSL ≫ OpenSSL Version 0.9.6e

OpenSSL ≫ OpenSSL Version 0.9.6f

OpenSSL ≫ OpenSSL Version 0.9.6g

OpenSSL ≫ OpenSSL Version 0.9.6h

OpenSSL ≫ OpenSSL Version 0.9.6i

OpenSSL ≫ OpenSSL Version 0.9.6j

OpenSSL ≫ OpenSSL Version 0.9.6k

OpenSSL ≫ OpenSSL Version 0.9.7

OpenSSL ≫ OpenSSL Version 0.9.7 Update beta1

OpenSSL ≫ OpenSSL Version 0.9.7 Update beta2

OpenSSL ≫ OpenSSL Version 0.9.7 Update beta3

OpenSSL ≫ OpenSSL Version 0.9.7a

OpenSSL ≫ OpenSSL Version 0.9.7b

OpenSSL ≫ OpenSSL Version 0.9.7c

Redhat ≫ OpenSSL Version 0.9.6-15 Edition i386

Redhat ≫ OpenSSL Version 0.9.6b-3 Edition i386

Redhat ≫ OpenSSL Version 0.9.7a-2 Edition i386

Redhat ≫ OpenSSL Version 0.9.7a-2 Edition i386_dev

Redhat ≫ OpenSSL Version 0.9.7a-2 Edition i386_perl

Sgi ≫ Propack Version 2.3

Sgi ≫ Propack Version 2.4

Sgi ≫ Propack Version 3.0

Stonesoft ≫ Servercluster Version 2.5

Stonesoft ≫ Servercluster Version 2.5.2

Stonesoft ≫ Stonebeat Fullcluster Version 1_2.0

Stonesoft ≫ Stonebeat Fullcluster Version 1_3.0

Stonesoft ≫ Stonebeat Fullcluster Version 2.0

Stonesoft ≫ Stonebeat Fullcluster Version 2.5

Stonesoft ≫ Stonebeat Fullcluster Version 3.0

Stonesoft ≫ Stonebeat Securitycluster Version 2.0

Stonesoft ≫ Stonebeat Securitycluster Version 2.5

Stonesoft ≫ Stonebeat Webcluster Version 2.0

Stonesoft ≫ Stonebeat Webcluster Version 2.5

Stonesoft ≫ Stonegate Version 1.5.17

Stonesoft ≫ Stonegate Version 1.5.18

Stonesoft ≫ Stonegate Version 1.6.2

Stonesoft ≫ Stonegate Version 1.6.3

Stonesoft ≫ Stonegate Version 1.7

Stonesoft ≫ Stonegate Version 1.7.1

Stonesoft ≫ Stonegate Version 1.7.2

Stonesoft ≫ Stonegate Version 2.0.1

Stonesoft ≫ Stonegate Version 2.0.4

Stonesoft ≫ Stonegate Version 2.0.5

Stonesoft ≫ Stonegate Version 2.0.6

Stonesoft ≫ Stonegate Version 2.0.7

Stonesoft ≫ Stonegate Version 2.0.8

Stonesoft ≫ Stonegate Version 2.0.9

Stonesoft ≫ Stonegate Version 2.1

Stonesoft ≫ Stonegate Version 2.2

Stonesoft ≫ Stonegate Version 2.2.1

Stonesoft ≫ Stonegate Version 2.2.4

Stonesoft ≫ Stonegate Vpn Client Version 1.7

Stonesoft ≫ Stonegate Vpn Client Version 1.7.2

Stonesoft ≫ Stonegate Vpn Client Version 2.0

Stonesoft ≫ Stonegate Vpn Client Version 2.0.7

Stonesoft ≫ Stonegate Vpn Client Version 2.0.8

Stonesoft ≫ Stonegate Vpn Client Version 2.0.9

Tarantella ≫ Tarantella Enterprise Version 3.20

Tarantella ≫ Tarantella Enterprise Version 3.30

Tarantella ≫ Tarantella Enterprise Version 3.40

VMware ≫ Gsx Server Version 2.0

VMware ≫ Gsx Server Version 2.0.1_build_2129

VMware ≫ Gsx Server Version 2.5.1

VMware ≫ Gsx Server Version 2.5.1_build_5336

VMware ≫ Gsx Server Version 3.0_build_7592

Avaya ≫ S8300 Version r2.0.0

Avaya ≫ S8300 Version r2.0.1

Avaya ≫ S8500 Version r2.0.0

Avaya ≫ S8500 Version r2.0.1

Avaya ≫ S8700 Version r2.0.0

Avaya ≫ S8700 Version r2.0.1

Bluecoat ≫ Proxysg

Cisco ≫ Call Manager

Cisco ≫ Content Services Switch 11500

Cisco ≫ Gss 4480 Global Site Selector

Cisco ≫ Gss 4490 Global Site Selector

Cisco ≫ Mds 9000

Cisco ≫ Secure Content Accelerator Version 10000

Securecomputing ≫ Sidewinder Version 5.2

Securecomputing ≫ Sidewinder Version 5.2.0.01

Securecomputing ≫ Sidewinder Version 5.2.0.02

Securecomputing ≫ Sidewinder Version 5.2.0.03

Securecomputing ≫ Sidewinder Version 5.2.0.04

Securecomputing ≫ Sidewinder Version 5.2.1

Securecomputing ≫ Sidewinder Version 5.2.1.02

Sun ≫ Crypto Accelerator 4000 Version 1.0

Bluecoat ≫ Cacheos Ca Sa Version 4.1.10

Bluecoat ≫ Cacheos Ca Sa Version 4.1.12

Cisco ≫ Pix Firewall Software Version 6.0

Cisco ≫ Pix Firewall Software Version 6.1

Cisco ≫ Pix Firewall Software Version 6.2

Cisco ≫ Pix Firewall Software Version 6.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	9.54%	0.948

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P
CISA-ADP	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

http://docs.info.apple.com/article.html?artnum=61798

Broken Link

http://lists.apple.com/mhonarc/security-announce/msg00045.html

Broken Link

http://secunia.com/advisories/17381

Broken Link

http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html

Mailing List

http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html

Mailing List

http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html

Mailing List

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc

Broken Link

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc

Broken Link

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt

Broken Link

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834

Broken Link

http://fedoranews.org/updates/FEDORA-2004-095.shtml

Third Party Advisory

http://marc.info/?l=bugtraq&m=107953412903636&w=2

Mailing List

http://marc.info/?l=bugtraq&m=108403806509920&w=2

Mailing List

http://secunia.com/advisories/11139

Broken Link

http://secunia.com/advisories/17398

Broken Link

http://secunia.com/advisories/17401

Broken Link

http://secunia.com/advisories/18247

Broken Link

http://security.gentoo.org/glsa/glsa-200403-03.xml

Third Party Advisory

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm

Third Party Advisory

http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US

Broken Link

http://www.ciac.org/ciac/bulletins/o-101.shtml

Broken Link

http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml

Broken Link

http://www.debian.org/security/2004/dsa-465

Third Party Advisory

http://www.kb.cert.org/vuls/id/288574

Third Party Advisory

US Government Resource

http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2004:023

Third Party Advisory

http://www.novell.com/linux/security/advisories/2004_07_openssl.html

Broken Link

http://www.openssl.org/news/secadv_20040317.txt

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2004-120.html

Broken Link

http://www.redhat.com/support/errata/RHSA-2004-121.html

Broken Link

http://www.redhat.com/support/errata/RHSA-2004-139.html

Broken Link

http://www.redhat.com/support/errata/RHSA-2005-829.html

Broken Link

http://www.redhat.com/support/errata/RHSA-2005-830.html

Broken Link

http://www.securityfocus.com/bid/9899

Third Party Advisory

Vendor Advisory

Broken Link

VDB Entry

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961

Broken Link

http://www.trustix.org/errata/2004/0012

Broken Link

http://www.uniras.gov.uk/vuls/2004/224012/index.htm

Broken Link

http://www.us-cert.gov/cas/techalerts/TA04-078A.html

Third Party Advisory

US Government Resource

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/15505

Third Party Advisory

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5770

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A870

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A975

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9779

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2004-0079

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0079

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0079

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2004-0079