CVE-2004-0081

EPSS 2.27%
Published 23.11.2004 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

Affected products Warnungen 0 Metrics 2 CWE 0 References 28

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Firewall Services Module

Cisco ≫ Firewall Services Module Version1.1.2

Cisco ≫ Firewall Services Module Version1.1.3

Hp ≫ Aaa Server

Hp ≫ Apache-based Web Server Version2.0.43.00

Hp ≫ Apache-based Web Server Version2.0.43.04

Symantec ≫ Clientless Vpn Gateway 4400 Version5.0

Cisco ≫ Ciscoworks Common Management Foundation Version2.1

Cisco ≫ Ciscoworks Common Services Version2.2

Avaya ≫ Converged Communications Server Version2.0

Avaya ≫ Sg200 Version4.4

Avaya ≫ Sg200 Version4.31.29

Avaya ≫ Sg203 Version4.4

Avaya ≫ Sg203 Version4.31.29

Avaya ≫ Sg208

Avaya ≫ Sg208 Version4.4

Avaya ≫ Sg5 Version4.2

Avaya ≫ Sg5 Version4.3

Avaya ≫ Sg5 Version4.4

Apple ≫ macOS X Version10.3.3

Apple ≫ macOS X Server Version10.3.3

Freebsd ≫ Freebsd Version4.8

Freebsd ≫ Freebsd Version4.8 Updatereleng

Freebsd ≫ Freebsd Version4.9

Freebsd ≫ Freebsd Version5.1

Freebsd ≫ Freebsd Version5.1 Updaterelease

Freebsd ≫ Freebsd Version5.1 Updatereleng

Freebsd ≫ Freebsd Version5.2

Freebsd ≫ Freebsd Version5.2.1 Updaterelease

Hp ≫ Hp-ux Version8.05

Hp ≫ Hp-ux Version11.00

Hp ≫ Hp-ux Version11.11

Hp ≫ Hp-ux Version11.23

Openbsd ≫ Openbsd Version3.3

Openbsd ≫ Openbsd Version3.4

Redhat ≫ Enterprise Linux Version3.0 Editionadvanced_server

Redhat ≫ Enterprise Linux Version3.0 Editionenterprise_server

Redhat ≫ Enterprise Linux Version3.0 Editionworkstation_server

Redhat ≫ Enterprise Linux Desktop Version3.0

Redhat ≫ Linux Version7.2

Redhat ≫ Linux Version7.3

Redhat ≫ Linux Version8.0

Sco ≫ Openserver Version5.0.6

Sco ≫ Openserver Version5.0.7

Cisco ≫ Ios Version12.2sy

Cisco ≫ Ios Version12.2za

4d ≫ Webstar Version4.0

4d ≫ Webstar Version5.2

4d ≫ Webstar Version5.2.1

4d ≫ Webstar Version5.2.2

4d ≫ Webstar Version5.2.3

4d ≫ Webstar Version5.2.4

4d ≫ Webstar Version5.3

4d ≫ Webstar Version5.3.1

Avaya ≫ Intuity Audix Editionlx

Avaya ≫ Intuity Audix Version5.1.46

Avaya ≫ Intuity Audix Versions3210

Avaya ≫ Intuity Audix Versions3400

Avaya ≫ Vsu Version5

Avaya ≫ Vsu Version5x

Avaya ≫ Vsu Version100_r2.0.1

Avaya ≫ Vsu Version500

Avaya ≫ Vsu Version2000_r2.0.1

Avaya ≫ Vsu Version5000_r2.0.1

Avaya ≫ Vsu Version7500_r2.0.1

Avaya ≫ Vsu Version10000_r2.0.1

Checkpoint ≫ Firewall-1 Editionvsx-ng-ai

Checkpoint ≫ Firewall-1 Version2.0 Editiongx

Checkpoint ≫ Firewall-1 Versionnext_generation_fp0

Checkpoint ≫ Firewall-1 Versionnext_generation_fp1

Checkpoint ≫ Firewall-1 Versionnext_generation_fp2

Checkpoint ≫ Provider-1 Version4.1

Checkpoint ≫ Provider-1 Version4.1 Updatesp1

Checkpoint ≫ Provider-1 Version4.1 Updatesp2

Checkpoint ≫ Provider-1 Version4.1 Updatesp3

Checkpoint ≫ Provider-1 Version4.1 Updatesp4

Checkpoint ≫ Vpn-1 Versionnext_generation

Checkpoint ≫ Vpn-1 Versionnext_generation_fp0

Checkpoint ≫ Vpn-1 Versionnext_generation_fp1

Checkpoint ≫ Vpn-1 Versionvsx_ng_with_application_intelligence

Cisco ≫ Access Registrar

Cisco ≫ Application And Content Networking Software

Cisco ≫ Css Secure Content Accelerator Version1.0

Cisco ≫ Css Secure Content Accelerator Version2.0

Cisco ≫ Css11000 Content Services Switch

Cisco ≫ Okena Stormwatch Version3.2

Cisco ≫ Pix Firewall Version6.2.2_.111

Cisco ≫ Threat Response

Cisco ≫ Webns Version6.10

Cisco ≫ Webns Version6.10_b4

Cisco ≫ Webns Version7.1_0.1.02

Cisco ≫ Webns Version7.1_0.2.06

Cisco ≫ Webns Version7.2_0.0.03

Cisco ≫ Webns Version7.10

Cisco ≫ Webns Version7.10_.0.06s

Dell ≫ Bsafe Ssl-j Version3.0

Dell ≫ Bsafe Ssl-j Version3.0.1

Dell ≫ Bsafe Ssl-j Version3.1

Hp ≫ Wbem Versiona.01.05.08

Hp ≫ Wbem Versiona.02.00.00

Hp ≫ Wbem Versiona.02.00.01

Lite ≫ Speed Technologies Litespeed Web Server Version1.0.1

Lite ≫ Speed Technologies Litespeed Web Server Version1.0.2

Lite ≫ Speed Technologies Litespeed Web Server Version1.0.3

Lite ≫ Speed Technologies Litespeed Web Server Version1.1

Lite ≫ Speed Technologies Litespeed Web Server Version1.1.1

Lite ≫ Speed Technologies Litespeed Web Server Version1.2.1

Lite ≫ Speed Technologies Litespeed Web Server Version1.2.2

Lite ≫ Speed Technologies Litespeed Web Server Version1.2_rc1

Lite ≫ Speed Technologies Litespeed Web Server Version1.2_rc2

Lite ≫ Speed Technologies Litespeed Web Server Version1.3

Lite ≫ Speed Technologies Litespeed Web Server Version1.3.1

Lite ≫ Speed Technologies Litespeed Web Server Version1.3_rc1

Lite ≫ Speed Technologies Litespeed Web Server Version1.3_rc2

Lite ≫ Speed Technologies Litespeed Web Server Version1.3_rc3

Neoteris ≫ Instant Virtual Extranet Version3.0

Neoteris ≫ Instant Virtual Extranet Version3.1

Neoteris ≫ Instant Virtual Extranet Version3.2

Neoteris ≫ Instant Virtual Extranet Version3.3

Neoteris ≫ Instant Virtual Extranet Version3.3.1

Novell ≫ Edirectory Version8.0

Novell ≫ Edirectory Version8.5

Novell ≫ Edirectory Version8.5.12a

Novell ≫ Edirectory Version8.5.27

Novell ≫ Edirectory Version8.6.2

Novell ≫ Edirectory Version8.7

Novell ≫ Edirectory Version8.7.1

Novell ≫ Edirectory Version8.7.1 Updatesp1

Novell ≫ Imanager Version1.5

Novell ≫ Imanager Version2.0

OpenSSL ≫ OpenSSL Version0.9.6c

OpenSSL ≫ OpenSSL Version0.9.6d

OpenSSL ≫ OpenSSL Version0.9.6e

OpenSSL ≫ OpenSSL Version0.9.6f

OpenSSL ≫ OpenSSL Version0.9.6g

OpenSSL ≫ OpenSSL Version0.9.6h

OpenSSL ≫ OpenSSL Version0.9.6i

OpenSSL ≫ OpenSSL Version0.9.6j

OpenSSL ≫ OpenSSL Version0.9.6k

OpenSSL ≫ OpenSSL Version0.9.7

OpenSSL ≫ OpenSSL Version0.9.7 Updatebeta1

OpenSSL ≫ OpenSSL Version0.9.7 Updatebeta2

OpenSSL ≫ OpenSSL Version0.9.7 Updatebeta3

OpenSSL ≫ OpenSSL Version0.9.7a

OpenSSL ≫ OpenSSL Version0.9.7b

OpenSSL ≫ OpenSSL Version0.9.7c

Redhat ≫ OpenSSL Version0.9.6-15 Editioni386

Redhat ≫ OpenSSL Version0.9.6b-3 Editioni386

Redhat ≫ OpenSSL Version0.9.7a-2 Editioni386

Redhat ≫ OpenSSL Version0.9.7a-2 Editioni386_dev

Redhat ≫ OpenSSL Version0.9.7a-2 Editioni386_perl

Sgi ≫ Propack Version2.3

Sgi ≫ Propack Version2.4

Sgi ≫ Propack Version3.0

Stonesoft ≫ Servercluster Version2.5

Stonesoft ≫ Servercluster Version2.5.2

Stonesoft ≫ Stonebeat Fullcluster Version1_2.0

Stonesoft ≫ Stonebeat Fullcluster Version1_3.0

Stonesoft ≫ Stonebeat Fullcluster Version2.0

Stonesoft ≫ Stonebeat Fullcluster Version2.5

Stonesoft ≫ Stonebeat Fullcluster Version3.0

Stonesoft ≫ Stonebeat Securitycluster Version2.0

Stonesoft ≫ Stonebeat Securitycluster Version2.5

Stonesoft ≫ Stonebeat Webcluster Version2.0

Stonesoft ≫ Stonebeat Webcluster Version2.5

Stonesoft ≫ Stonegate Version1.5.17

Stonesoft ≫ Stonegate Version1.5.18

Stonesoft ≫ Stonegate Version1.6.2

Stonesoft ≫ Stonegate Version1.6.3

Stonesoft ≫ Stonegate Version1.7

Stonesoft ≫ Stonegate Version1.7.1

Stonesoft ≫ Stonegate Version1.7.2

Stonesoft ≫ Stonegate Version2.0.1

Stonesoft ≫ Stonegate Version2.0.4

Stonesoft ≫ Stonegate Version2.0.5

Stonesoft ≫ Stonegate Version2.0.6

Stonesoft ≫ Stonegate Version2.0.7

Stonesoft ≫ Stonegate Version2.0.8

Stonesoft ≫ Stonegate Version2.0.9

Stonesoft ≫ Stonegate Version2.1

Stonesoft ≫ Stonegate Version2.2

Stonesoft ≫ Stonegate Version2.2.1

Stonesoft ≫ Stonegate Version2.2.4

Stonesoft ≫ Stonegate Vpn Client Version1.7

Stonesoft ≫ Stonegate Vpn Client Version1.7.2

Stonesoft ≫ Stonegate Vpn Client Version2.0

Stonesoft ≫ Stonegate Vpn Client Version2.0.7

Stonesoft ≫ Stonegate Vpn Client Version2.0.8

Stonesoft ≫ Stonegate Vpn Client Version2.0.9

Tarantella ≫ Tarantella Enterprise Version3.20

Tarantella ≫ Tarantella Enterprise Version3.30

Tarantella ≫ Tarantella Enterprise Version3.40

VMware ≫ Gsx Server Version2.0

VMware ≫ Gsx Server Version2.0.1_build_2129

VMware ≫ Gsx Server Version2.5.1

VMware ≫ Gsx Server Version2.5.1_build_5336

VMware ≫ Gsx Server Version3.0_build_7592

Avaya ≫ S8300 Versionr2.0.0

Avaya ≫ S8300 Versionr2.0.1

Avaya ≫ S8500 Versionr2.0.0

Avaya ≫ S8500 Versionr2.0.1

Avaya ≫ S8700 Versionr2.0.0

Avaya ≫ S8700 Versionr2.0.1

Bluecoat ≫ Proxysg

Cisco ≫ Call Manager

Cisco ≫ Content Services Switch 11500

Cisco ≫ Gss 4480 Global Site Selector

Cisco ≫ Gss 4490 Global Site Selector

Cisco ≫ Mds 9000

Cisco ≫ Secure Content Accelerator Version10000

Securecomputing ≫ Sidewinder Version5.2

Securecomputing ≫ Sidewinder Version5.2.0.01

Securecomputing ≫ Sidewinder Version5.2.0.02

Securecomputing ≫ Sidewinder Version5.2.0.03

Securecomputing ≫ Sidewinder Version5.2.0.04

Securecomputing ≫ Sidewinder Version5.2.1

Securecomputing ≫ Sidewinder Version5.2.1.02

Sun ≫ Crypto Accelerator 4000 Version1.0

Bluecoat ≫ Cacheos Ca Sa Version4.1.10

Bluecoat ≫ Cacheos Ca Sa Version4.1.12

Cisco ≫ Pix Firewall Software Version6.0

Cisco ≫ Pix Firewall Software Version6.1

Cisco ≫ Pix Firewall Software Version6.2

Cisco ≫ Pix Firewall Software Version6.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.27%	0.841

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc

http://marc.info/?l=bugtraq&m=108403850228012&w=2

http://rhn.redhat.com/errata/RHSA-2004-119.html

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834

http://fedoranews.org/updates/FEDORA-2004-095.shtml

http://secunia.com/advisories/11139

http://security.gentoo.org/glsa/glsa-200403-03.xml

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524

http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml

http://www.debian.org/security/2004/dsa-465

http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html

http://www.redhat.com/support/errata/RHSA-2004-120.html

http://www.redhat.com/support/errata/RHSA-2004-121.html

http://www.redhat.com/support/errata/RHSA-2004-139.html

http://www.securityfocus.com/bid/9899

Vendor Advisory

http://www.trustix.org/errata/2004/0012

http://www.uniras.gov.uk/vuls/2004/224012/index.htm

http://www.us-cert.gov/cas/techalerts/TA04-078A.html

US Government Resource

http://marc.info/?l=bugtraq&m=107955049331965&w=2

http://www.kb.cert.org/vuls/id/465542

Third Party Advisory

US Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/15509

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11755

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A902

https://nvd.nist.gov/vuln/detail/CVE-2004-0081

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0081

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0081

EUVD