CVE-2004-0081
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
- EPSS
- 7.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- 4d:webstar
- apple:mac_os_x
- apple:mac_os_x_server
- avaya:converged_communications_server
- avaya:intuity_audix
- avaya:s8300
- avaya:s8500
- avaya:s8700
- avaya:sg200
- avaya:sg203
- avaya:sg208
- avaya:sg5
- avaya:vsu
- bluecoat:cacheos_ca_sa
- bluecoat:proxysg
- checkpoint:firewall-1
- checkpoint:provider-1
- checkpoint:vpn-1
- cisco:access_registrar
- cisco:application_and_content_networking_software
- cisco:call_manager
- cisco:ciscoworks_common_management_foundation
- cisco:ciscoworks_common_services
- cisco:content_services_switch_11500
- cisco:css11000_content_services_switch
- cisco:css_secure_content_accelerator
- cisco:firewall_services_module
- cisco:gss_4480_global_site_selector
- cisco:gss_4490_global_site_selector
- cisco:ios
- cisco:mds_9000
- cisco:okena_stormwatch
- cisco:pix_firewall
- cisco:pix_firewall_software
- cisco:secure_content_accelerator
- cisco:threat_response
- cisco:webns
- dell:bsafe_ssl-j
- freebsd:freebsd
- hp:aaa_server
- hp:apache-based_web_server
- hp:hp-ux
- hp:wbem
- lite:speed_technologies_litespeed_web_server
- neoteris:instant_virtual_extranet
- novell:edirectory
- novell:imanager
- openbsd:openbsd
- openssl:openssl
- redhat:enterprise_linux
References
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
- ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
- http://fedoranews.org/updates/FEDORA-2004-095.shtml
- http://marc.info/?l=bugtraq&m=107955049331965&w=2