CVE-2004-0112
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
- EPSS
- 10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- 4d:webstar
- apple:mac_os_x
- apple:mac_os_x_server
- avaya:converged_communications_server
- avaya:intuity_audix
- avaya:s8300
- avaya:s8500
- avaya:s8700
- avaya:sg200
- avaya:sg203
- avaya:sg208
- avaya:sg5
- avaya:vsu
- bluecoat:cacheos_ca_sa
- bluecoat:proxysg
- checkpoint:firewall-1
- checkpoint:provider-1
- checkpoint:vpn-1
- cisco:access_registrar
- cisco:application_and_content_networking_software
- cisco:call_manager
- cisco:ciscoworks_common_management_foundation
- cisco:ciscoworks_common_services
- cisco:content_services_switch_11500
- cisco:css11000_content_services_switch
- cisco:css_secure_content_accelerator
- cisco:firewall_services_module
- cisco:gss_4480_global_site_selector
- cisco:gss_4490_global_site_selector
- cisco:ios
- cisco:mds_9000
- cisco:okena_stormwatch
- cisco:pix_firewall
- cisco:pix_firewall_software
- cisco:secure_content_accelerator
- cisco:threat_response
- cisco:webns
- dell:bsafe_ssl-j
- forcepoint:stonegate
- freebsd:freebsd
- hp:aaa_server
- hp:apache-based_web_server
- hp:hp-ux
- hp:wbem
- litespeedtech:litespeed_web_server
- neoteris:instant_virtual_extranet
- novell:edirectory
- novell:imanager
- openbsd:openbsd
- openssl:openssl
References
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
- http://docs.info.apple.com/article.html?artnum=61798
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html