CVE Feed

    Dashboard / CVE / CVE-2004-0081

    CVE-2004-0081

    OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

    Published:Mar 17, 2004
    Last Modified:Apr 16, 2026
    EPS:Mar 18, 2004
    EPSS Score:0.02393
    CVSS Score:5

    Affected Products

    Vendor
    4d
    Product
    Webstar
    Vendor
    Apple
    Product
    Mac Os X
    Vendor
    Apple
    Product
    Mac Os X Server
    Vendor
    Avaya
    Product
    Converged Communications Server
    Vendor
    Avaya
    Product
    Intuity Audix
    Vendor
    Avaya
    Product
    S8300
    Vendor
    Avaya
    Product
    S8500
    Vendor
    Avaya
    Product
    S8700
    Vendor
    Avaya
    Product
    Sg200
    Vendor
    Avaya
    Product
    Sg203
    Vendor
    Avaya
    Product
    Sg208
    Vendor
    Avaya
    Product
    Sg5
    Vendor
    Avaya
    Product
    Vsu
    Vendor
    Bluecoat
    Product
    Cacheos Ca Sa
    Vendor
    Bluecoat
    Product
    Proxysg
    Vendor
    Checkpoint
    Product
    Firewall-1
    Vendor
    Checkpoint
    Product
    Provider-1
    Vendor
    Checkpoint
    Product
    Vpn-1
    Vendor
    Cisco
    Product
    Access Registrar
    Vendor
    Cisco
    Product
    Application And Content Networking Software
    Vendor
    Cisco
    Product
    Call Manager
    Vendor
    Cisco
    Product
    Ciscoworks Common Management Foundation
    Vendor
    Cisco
    Product
    Ciscoworks Common Services
    Vendor
    Cisco
    Product
    Content Services Switch 11500
    Vendor
    Cisco
    Product
    Css11000 Content Services Switch
    Vendor
    Cisco
    Product
    Css Secure Content Accelerator
    Vendor
    Cisco
    Product
    Firewall Services Module
    Vendor
    Cisco
    Product
    Gss 4480 Global Site Selector
    Vendor
    Cisco
    Product
    Gss 4490 Global Site Selector
    Vendor
    Cisco
    Product
    Ios
    Vendor
    Cisco
    Product
    Mds 9000
    Vendor
    Cisco
    Product
    Okena Stormwatch
    Vendor
    Cisco
    Product
    Pix Firewall
    Vendor
    Cisco
    Product
    Pix Firewall Software
    Vendor
    Cisco
    Product
    Secure Content Accelerator
    Vendor
    Cisco
    Product
    Threat Response
    Vendor
    Cisco
    Product
    Webns
    Vendor
    Dell
    Product
    Bsafe Ssl-j
    Vendor
    Freebsd
    Product
    Freebsd
    Vendor
    Hp
    Product
    Aaa Server
    Vendor
    Hp
    Product
    Apache-based Web Server
    Vendor
    Hp
    Product
    Hp-ux
    Vendor
    Hp
    Product
    Wbem
    Vendor
    Lite
    Product
    Speed Technologies Litespeed Web Server
    Vendor
    Neoteris
    Product
    Instant Virtual Extranet
    Vendor
    Novell
    Product
    Edirectory
    Vendor
    Novell
    Product
    Imanager
    Vendor
    Openbsd
    Product
    Openbsd
    Vendor
    Openssl
    Product
    Openssl
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Linux
    Vendor
    Redhat
    Product
    Openssl
    Vendor
    Redhat
    Product
    Stronghold
    Vendor
    Sco
    Product
    Openserver
    Vendor
    Securecomputing
    Product
    Sidewinder
    Vendor
    Sgi
    Product
    Propack
    Vendor
    Stonesoft
    Product
    Servercluster
    Vendor
    Stonesoft
    Product
    Stonebeat Fullcluster
    Vendor
    Stonesoft
    Product
    Stonebeat Securitycluster
    Vendor
    Stonesoft
    Product
    Stonebeat Webcluster
    Vendor
    Stonesoft
    Product
    Stonegate
    Vendor
    Stonesoft
    Product
    Stonegate Vpn Client
    Vendor
    Sun
    Product
    Crypto Accelerator 4000
    Vendor
    Symantec
    Product
    Clientless Vpn Gateway 4400
    Vendor
    Tarantella
    Product
    Tarantella Enterprise
    Vendor
    Vmware
    Product
    Gsx Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2005-3143 (CVSS 5) — Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial…
    CVE-2005-1507 (CVSS 5) — Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of s…
    CVE-2004-0698 (CVSS 3.6) — 4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.…
    CVE-2004-0695 (CVSS 7.5) — Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to exe…
    CVE-2004-0696 (CVSS 5) — The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary director…
    CVE-2004-0697 (CVSS 5) — Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuratio…
    CVE-2004-0112 (CVSS 5) — The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not…
    CVE-2004-0079 (CVSS 7.5) — The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers …

    References

    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
    ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc
    http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
    http://fedoranews.org/updates/FEDORA-2004-095.shtml
    http://marc.info/?l=bugtraq&m=107955049331965&w=2
    http://marc.info/?l=bugtraq&m=108403850228012&w=2
    http://rhn.redhat.com/errata/RHSA-2004-119.html
    http://secunia.com/advisories/11139
    http://security.gentoo.org/glsa/glsa-200403-03.xml
    http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
    http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
    http://www.debian.org/security/2004/dsa-465
    http://www.kb.cert.org/vuls/id/465542
    http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html
    http://www.redhat.com/support/errata/RHSA-2004-120.html
    http://www.redhat.com/support/errata/RHSA-2004-121.html
    http://www.redhat.com/support/errata/RHSA-2004-139.html
    http://www.securityfocus.com/bid/9899
    http://www.trustix.org/errata/2004/0012
    http://www.uniras.gov.uk/vuls/2004/224012/index.htm
    http://www.us-cert.gov/cas/techalerts/TA04-078A.html
    https://exchange.xforce.ibmcloud.com/vulnerabilities/15509
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11755
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A902
    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
    ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc
    http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
    http://fedoranews.org/updates/FEDORA-2004-095.shtml
    http://marc.info/?l=bugtraq&m=107955049331965&w=2
    http://marc.info/?l=bugtraq&m=108403850228012&w=2
    http://rhn.redhat.com/errata/RHSA-2004-119.html
    http://secunia.com/advisories/11139
    http://security.gentoo.org/glsa/glsa-200403-03.xml
    http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
    http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
    http://www.debian.org/security/2004/dsa-465
    http://www.kb.cert.org/vuls/id/465542
    http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html
    http://www.redhat.com/support/errata/RHSA-2004-120.html
    http://www.redhat.com/support/errata/RHSA-2004-121.html
    http://www.redhat.com/support/errata/RHSA-2004-139.html
    http://www.securityfocus.com/bid/9899
    http://www.trustix.org/errata/2004/0012
    http://www.uniras.gov.uk/vuls/2004/224012/index.htm
    http://www.us-cert.gov/cas/techalerts/TA04-078A.html
    https://exchange.xforce.ibmcloud.com/vulnerabilities/15509
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11755
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A902

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High