CVE-2004-0079
- State
- Published
- Severity
- 7.5 High
- Published
- Mar 18, 2004
- Updated
- Jan 16, 2025
- Reserved
- Jan 19, 2004
Description
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | CISA-ADP |
Weaknesses
- CWE-476 NULL Pointer Dereference
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 9899vdb-entry
- FEDORA-2005-1042vendor-advisory
- ESA-20040317-003vendor-advisory
- SSRT4717vendor-advisory
- RHSA-2004:121vendor-advisory
- MDKSA-2004:023vendor-advisory
- oval:org.mitre.oval:def:2621vdb-entrysignature
- CLA-2004:834vendor-advisory
- 17381third-party-advisory
- http://www.uniras.gov.uk/vuls/2004/224012/index.htm
- FEDORA-2004-095vendor-advisory
- oval:org.mitre.oval:def:9779vdb-entrysignature
- oval:org.mitre.oval:def:975vdb-entrysignature
- 57524vendor-advisory
- SuSE-SA:2004:007vendor-advisory
- http://lists.apple.com/mhonarc/security-announce/msg00045.html
- http://www.openssl.org/news/secadv_20040317.txt
- O-101third-party-advisorygovernment-resource
- TA04-078Athird-party-advisory
- 17401third-party-advisory
- RHSA-2005:829vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm
- oval:org.mitre.oval:def:870vdb-entrysignature
- RHSA-2005:830vendor-advisory
- GLSA-200403-03vendor-advisory
- 11139third-party-advisory
- RHSA-2004:120vendor-advisory
- 20040317 New OpenSSL releases fix denial of service attacks [17 March 2004]mailing-list
- http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US
- APPLE-SA-2005-08-15vendor-advisory
- 17398third-party-advisory
- SSA:2004-077vendor-advisory
- RHSA-2004:139vendor-advisory
- openssl-dochangecipherspec-dos(15505)vdb-entry
- 2004-0012vendor-advisory
- 20040317 Cisco OpenSSL Implementation Vulnerabilityvendor-advisory
- http://docs.info.apple.com/article.html?artnum=61798
- VU#288574third-party-advisory
- DSA-465vendor-advisory
- APPLE-SA-2005-08-17vendor-advisory
- 18247third-party-advisory
- oval:org.mitre.oval:def:5770vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.