CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2004-0079
High (7.5). EPSS 9.5% chance of exploitation in the next 30 days.
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Severity
- EPSS
- 9.5% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- 4d:webstar
- apple:mac_os_x
- apple:mac_os_x_server
- avaya:converged_communications_server
- avaya:intuity_audix
- avaya:s8300
- avaya:s8500
- avaya:s8700
- avaya:sg200
- avaya:sg203
- avaya:sg208
- avaya:sg5
- avaya:vsu
- bluecoat:cacheos_ca_sa
- bluecoat:proxysg
- checkpoint:firewall-1
- checkpoint:provider-1
- checkpoint:vpn-1
- cisco:access_registrar
- cisco:application_and_content_networking_software
- cisco:call_manager
- cisco:ciscoworks_common_management_foundation
- cisco:ciscoworks_common_services
- cisco:content_services_switch_11500
- cisco:css11000_content_services_switch
- cisco:css_secure_content_accelerator
- cisco:firewall_services_module
- cisco:gss_4480_global_site_selector
- cisco:gss_4490_global_site_selector
- cisco:ios
- cisco:mds_9000
- cisco:okena_stormwatch
- cisco:pix_firewall
- cisco:pix_firewall_software
- cisco:secure_content_accelerator
- cisco:threat_response
- cisco:webns
- dell:bsafe_ssl-j
- freebsd:freebsd
- hp:aaa_server
- hp:apache-based_web_server
- hp:hp-ux
- hp:wbem
- lite:speed_technologies_litespeed_web_server
- neoteris:instant_virtual_extranet
- novell:edirectory
- novell:imanager
- openbsd:openbsd
- openssl:openssl
- redhat:enterprise_linux
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
- http://docs.info.apple.com/article.html?artnum=61798