CVE-2004-0112

EPSS 10.42%
Veröffentlicht 23.11.2004 05:00:00
Zuletzt bearbeitet 16.06.2026 22:04:57
Erkennungen
Login

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 32

NVD 205 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Firewall Services Module

Cisco ≫ Firewall Services Module Version 1.1.2

Cisco ≫ Firewall Services Module Version 1.1.3

Hp ≫ Aaa Server

Hp ≫ Apache-based Web Server Version 2.0.43.00

Hp ≫ Apache-based Web Server Version 2.0.43.04

Symantec ≫ Clientless Vpn Gateway 4400 Version 5.0

Cisco ≫ Ciscoworks Common Management Foundation Version 2.1

Cisco ≫ Ciscoworks Common Services Version 2.2

Avaya ≫ Converged Communications Server Version 2.0

Avaya ≫ Sg200 Version 4.4

Avaya ≫ Sg200 Version 4.31.29

Avaya ≫ Sg203 Version 4.4

Avaya ≫ Sg203 Version 4.31.29

Avaya ≫ Sg208

Avaya ≫ Sg208 Version 4.4

Avaya ≫ Sg5 Version 4.2

Avaya ≫ Sg5 Version 4.3

Avaya ≫ Sg5 Version 4.4

Apple ≫ macOS X Version 10.3.3

Apple ≫ macOS X Server Version 10.3.3

Freebsd ≫ Freebsd Version 4.8

Freebsd ≫ Freebsd Version 4.8 Update releng

Freebsd ≫ Freebsd Version 4.9

Freebsd ≫ Freebsd Version 5.1

Freebsd ≫ Freebsd Version 5.1 Update release

Freebsd ≫ Freebsd Version 5.1 Update releng

Freebsd ≫ Freebsd Version 5.2

Freebsd ≫ Freebsd Version 5.2.1 Update release

Hp ≫ Hp-ux Version 8.05

Hp ≫ Hp-ux Version 11.00

Hp ≫ Hp-ux Version 11.11

Hp ≫ Hp-ux Version 11.23

Openbsd ≫ Openbsd Version 3.3

Openbsd ≫ Openbsd Version 3.4

Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_server

Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 3.0 Edition workstation_server

Redhat ≫ Enterprise Linux Desktop Version 3.0

Redhat ≫ Linux Version 7.2

Redhat ≫ Linux Version 7.3

Redhat ≫ Linux Version 8.0

Sco ≫ Openserver Version 5.0.6

Sco ≫ Openserver Version 5.0.7

Cisco ≫ Ios Version 12.2sy

Cisco ≫ Ios Version 12.2za

4d ≫ Webstar Version 4.0

4d ≫ Webstar Version 5.2

4d ≫ Webstar Version 5.2.1

4d ≫ Webstar Version 5.2.2

4d ≫ Webstar Version 5.2.3

4d ≫ Webstar Version 5.2.4

4d ≫ Webstar Version 5.3

4d ≫ Webstar Version 5.3.1

Avaya ≫ Intuity Audix Edition lx

Avaya ≫ Intuity Audix Version 5.1.46

Avaya ≫ Intuity Audix Version s3210

Avaya ≫ Intuity Audix Version s3400

Avaya ≫ Vsu Version 5

Avaya ≫ Vsu Version 5x

Avaya ≫ Vsu Version 100_r2.0.1

Avaya ≫ Vsu Version 500

Avaya ≫ Vsu Version 2000_r2.0.1

Avaya ≫ Vsu Version 5000_r2.0.1

Avaya ≫ Vsu Version 7500_r2.0.1

Avaya ≫ Vsu Version 10000_r2.0.1

Checkpoint ≫ Firewall-1 Edition vsx-ng-ai

Checkpoint ≫ Firewall-1 Version 2.0 Edition gx

Checkpoint ≫ Firewall-1 Version next_generation_fp0

Checkpoint ≫ Firewall-1 Version next_generation_fp1

Checkpoint ≫ Firewall-1 Version next_generation_fp2

Checkpoint ≫ Provider-1 Version 4.1

Checkpoint ≫ Provider-1 Version 4.1 Update sp1

Checkpoint ≫ Provider-1 Version 4.1 Update sp2

Checkpoint ≫ Provider-1 Version 4.1 Update sp3

Checkpoint ≫ Provider-1 Version 4.1 Update sp4

Checkpoint ≫ Vpn-1 Version next_generation_fp0

Checkpoint ≫ Vpn-1 Version next_generation_fp1

Checkpoint ≫ Vpn-1 Version next_generation_fp2

Checkpoint ≫ Vpn-1 Version vsx_ng_with_application_intelligence

Cisco ≫ Access Registrar

Cisco ≫ Application And Content Networking Software

Cisco ≫ Css Secure Content Accelerator Version 1.0

Cisco ≫ Css Secure Content Accelerator Version 2.0

Cisco ≫ Css11000 Content Services Switch

Cisco ≫ Okena Stormwatch Version 3.2

Cisco ≫ Pix Firewall Version 6.2.2_.111

Cisco ≫ Threat Response

Cisco ≫ Webns Version 6.10

Cisco ≫ Webns Version 6.10_b4

Cisco ≫ Webns Version 7.1_0.1.02

Cisco ≫ Webns Version 7.1_0.2.06

Cisco ≫ Webns Version 7.2_0.0.03

Cisco ≫ Webns Version 7.10

Cisco ≫ Webns Version 7.10_.0.06s

Dell ≫ Bsafe Ssl-j Version 3.0

Dell ≫ Bsafe Ssl-j Version 3.0.1

Dell ≫ Bsafe Ssl-j Version 3.1

Forcepoint ≫ Stonegate Version 1.5.17

Forcepoint ≫ Stonegate Version 1.5.18

Forcepoint ≫ Stonegate Version 1.6.2

Forcepoint ≫ Stonegate Version 1.6.3

Forcepoint ≫ Stonegate Version 1.7

Forcepoint ≫ Stonegate Version 1.7.1

Forcepoint ≫ Stonegate Version 1.7.2

Forcepoint ≫ Stonegate Version 2.0.1

Forcepoint ≫ Stonegate Version 2.0.4

Forcepoint ≫ Stonegate Version 2.0.5

Forcepoint ≫ Stonegate Version 2.0.6

Forcepoint ≫ Stonegate Version 2.0.7

Forcepoint ≫ Stonegate Version 2.0.8

Forcepoint ≫ Stonegate Version 2.0.9

Forcepoint ≫ Stonegate Version 2.1

Forcepoint ≫ Stonegate Version 2.2

Forcepoint ≫ Stonegate Version 2.2.1

Forcepoint ≫ Stonegate Version 2.2.4

Hp ≫ Wbem Version a.01.05.08

Hp ≫ Wbem Version a.02.00.00

Hp ≫ Wbem Version a.02.00.01

Litespeedtech ≫ Litespeed Web Server Version 1.0.1

Neoteris ≫ Instant Virtual Extranet Version 3.0

Neoteris ≫ Instant Virtual Extranet Version 3.1

Neoteris ≫ Instant Virtual Extranet Version 3.2

Neoteris ≫ Instant Virtual Extranet Version 3.3

Neoteris ≫ Instant Virtual Extranet Version 3.3.1

Novell ≫ Edirectory Version 8.0

Novell ≫ Edirectory Version 8.5

Novell ≫ Edirectory Version 8.5.12a

Novell ≫ Edirectory Version 8.5.27

Novell ≫ Edirectory Version 8.6.2

Novell ≫ Edirectory Version 8.7

Novell ≫ Edirectory Version 8.7.1

Novell ≫ Edirectory Version 8.7.1 Update sp1

Novell ≫ Imanager Version 1.5

Novell ≫ Imanager Version 2.0

OpenSSL ≫ OpenSSL Version 0.9.6c

OpenSSL ≫ OpenSSL Version 0.9.6d

OpenSSL ≫ OpenSSL Version 0.9.6e

OpenSSL ≫ OpenSSL Version 0.9.6f

OpenSSL ≫ OpenSSL Version 0.9.6g

OpenSSL ≫ OpenSSL Version 0.9.6h

OpenSSL ≫ OpenSSL Version 0.9.6i

OpenSSL ≫ OpenSSL Version 0.9.6j

OpenSSL ≫ OpenSSL Version 0.9.6k

OpenSSL ≫ OpenSSL Version 0.9.7

OpenSSL ≫ OpenSSL Version 0.9.7 Update beta1

OpenSSL ≫ OpenSSL Version 0.9.7 Update beta2

OpenSSL ≫ OpenSSL Version 0.9.7 Update beta3

OpenSSL ≫ OpenSSL Version 0.9.7a

OpenSSL ≫ OpenSSL Version 0.9.7b

OpenSSL ≫ OpenSSL Version 0.9.7c

Redhat ≫ OpenSSL Version 0.9.6-15 Edition i386

Redhat ≫ OpenSSL Version 0.9.6b-3 Edition i386

Redhat ≫ OpenSSL Version 0.9.7a-2 Edition i386

Redhat ≫ OpenSSL Version 0.9.7a-2 Edition i386_dev

Redhat ≫ OpenSSL Version 0.9.7a-2 Edition i386_perl

Sgi ≫ Propack Version 2.3

Sgi ≫ Propack Version 2.4

Sgi ≫ Propack Version 3.0

Stonesoft ≫ Servercluster Version 2.5

Stonesoft ≫ Servercluster Version 2.5.2

Stonesoft ≫ Stonebeat Fullcluster Version 1_2.0

Stonesoft ≫ Stonebeat Fullcluster Version 1_3.0

Stonesoft ≫ Stonebeat Fullcluster Version 2.0

Stonesoft ≫ Stonebeat Fullcluster Version 2.5

Stonesoft ≫ Stonebeat Fullcluster Version 3.0

Stonesoft ≫ Stonebeat Securitycluster Version 2.0

Stonesoft ≫ Stonebeat Securitycluster Version 2.5

Stonesoft ≫ Stonebeat Webcluster Version 2.0

Stonesoft ≫ Stonebeat Webcluster Version 2.5

Tarantella ≫ Tarantella Enterprise Version 3.20

Tarantella ≫ Tarantella Enterprise Version 3.30

Tarantella ≫ Tarantella Enterprise Version 3.40

VMware ≫ Gsx Server Version 2.0

VMware ≫ Gsx Server Version 2.0.1_build_2129

VMware ≫ Gsx Server Version 2.5.1

VMware ≫ Gsx Server Version 2.5.1_build_5336

VMware ≫ Gsx Server Version 3.0_build_7592

Avaya ≫ S8300 Version r2.0.0

Avaya ≫ S8300 Version r2.0.1

Avaya ≫ S8500 Version r2.0.0

Avaya ≫ S8500 Version r2.0.1

Avaya ≫ S8700 Version r2.0.0

Avaya ≫ S8700 Version r2.0.1

Bluecoat ≫ Proxysg

Cisco ≫ Call Manager

Cisco ≫ Content Services Switch 11500

Cisco ≫ Gss 4480 Global Site Selector

Cisco ≫ Gss 4490 Global Site Selector

Cisco ≫ Mds 9000

Cisco ≫ Secure Content Accelerator Version 10000

Securecomputing ≫ Sidewinder Version 5.2

Securecomputing ≫ Sidewinder Version 5.2.0.01

Securecomputing ≫ Sidewinder Version 5.2.0.02

Securecomputing ≫ Sidewinder Version 5.2.0.03

Securecomputing ≫ Sidewinder Version 5.2.0.04

Securecomputing ≫ Sidewinder Version 5.2.1

Securecomputing ≫ Sidewinder Version 5.2.1.02

Sun ≫ Crypto Accelerator 4000 Version 1.0

Bluecoat ≫ Cacheos Ca Sa Version 4.1.10

Bluecoat ≫ Cacheos Ca Sa Version 4.1.12

Cisco ≫ Pix Firewall Software Version 6.0

Cisco ≫ Pix Firewall Software Version 6.1

Cisco ≫ Pix Firewall Software Version 6.2

Cisco ≫ Pix Firewall Software Version 6.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.42%	0.951

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://docs.info.apple.com/article.html?artnum=61798

Broken Link

http://lists.apple.com/mhonarc/security-announce/msg00045.html

Broken Link

http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html

Mailing List

http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html

Mailing List

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc

Broken Link

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt

Broken Link

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834

Broken Link

http://marc.info/?l=bugtraq&m=107953412903636&w=2

Third Party Advisory

Mailing List

http://marc.info/?l=bugtraq&m=108403806509920&w=2

Third Party Advisory

Mailing List

http://secunia.com/advisories/11139

Broken Link

http://security.gentoo.org/glsa/glsa-200403-03.xml

Third Party Advisory

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524

Broken Link

http://www.ciac.org/ciac/bulletins/o-101.shtml

Broken Link

http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2004:023

Third Party Advisory

http://www.novell.com/linux/security/advisories/2004_07_openssl.html

Broken Link

http://www.openssl.org/news/secadv_20040317.txt

Broken Link

http://www.redhat.com/support/errata/RHSA-2004-120.html

Broken Link

http://www.redhat.com/support/errata/RHSA-2004-121.html

Broken Link

http://www.securityfocus.com/bid/9899

Third Party Advisory

Vendor Advisory

Broken Link

VDB Entry

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961

Broken Link

http://www.trustix.org/errata/2004/0012

Broken Link

http://www.uniras.gov.uk/vuls/2004/224012/index.htm

Broken Link

http://www.us-cert.gov/cas/techalerts/TA04-078A.html

Third Party Advisory

US Government Resource

Broken Link

http://www.kb.cert.org/vuls/id/484726

Third Party Advisory

US Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/15508

Third Party Advisory

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2004-0112

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0112

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0112

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2004-0112