CVE-2004-0081
Medium
Description
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Openssl
PublishedNov 23, 2004
First seenNov 23, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openssl openssl | 0.9.6c, 0.9.6d, 0.9.6e, 0.9.6f, 0.9.6g, 0.9.6h, 0.9.6i, 0.9.6j, 0.9.6k, 0.9.7, 0.9.7a, 0.9.7b, 0.9.7c | — |
| cisco firewall_services_module | No range specified, 1.1.2, 1.1.3, 1.1_\(3.005\), 2.1_\(0.208\) | — |
| hp aaa_server | No range specified | — |
| hp apache-based_web_server | 2.0.43.00, 2.0.43.04 | — |
| symantec clientless_vpn_gateway_4400 | 5.0 | — |
| cisco ciscoworks_common_management_foundation | 2.1 | — |
| cisco ciscoworks_common_services | 2.2 | — |
| avaya converged_communications_server | 2.0 | — |
| avaya sg200 | 4.4, 4.31.29 | — |
| avaya sg203 | 4.4, 4.31.29 | — |
| avaya sg208 | No range specified, 4.4 | — |
| avaya sg5 | 4.2, 4.3, 4.4 | — |
| apple mac_os_x | 10.3.3 | — |
| apple mac_os_x_server | 10.3.3 | — |
| freebsd freebsd | 4.8, 4.9, 5.1, 5.2, 5.2.1 | — |
| hp hp-ux | 8.05, 11.00, 11.11, 11.23 | — |
| openbsd openbsd | 3.3, 3.4 | — |
| redhat enterprise_linux | 3.0 | — |
| redhat enterprise_linux_desktop | 3.0 | — |
| redhat linux | 7.2, 7.3, 8.0 | — |
| sco openserver | 5.0.6, 5.0.7 | — |
| cisco ios | 12.1\(11\)e, 12.1\(11b\)e, 12.1\(11b\)e12, 12.1\(11b\)e14, 12.1\(13\)e9, 12.1\(19\)e1, 12.2\(14\)sy, 12.2\(14\)sy1, 12.2sy, 12.2za | — |
| 4d webstar | 4.0, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.3, 5.3.1 | — |
| avaya intuity_audix | No range specified, 5.1.46, s3210, s3400 | — |
| avaya vsu | 5, 5x, 100_r2.0.1, 500, 2000_r2.0.1, 5000_r2.0.1, 7500_r2.0.1, 10000_r2.0.1 | — |
| checkpoint firewall-1 | No range specified, 2.0, next_generation_fp0, next_generation_fp1, next_generation_fp2 | — |
| checkpoint provider-1 | 4.1 | — |
| checkpoint vpn-1 | next_generation, next_generation_fp0, next_generation_fp1, vsx_ng_with_application_intelligence | — |
| cisco access_registrar | No range specified | — |
| cisco application_and_content_networking_software | No range specified | — |
| cisco css_secure_content_accelerator | 1.0, 2.0 | — |
| cisco css11000_content_services_switch | No range specified | — |
| cisco okena_stormwatch | 3.2 | — |
| cisco pix_firewall | 6.2.2_.111 | — |
| cisco threat_response | No range specified | — |
| cisco webns | 6.10, 6.10_b4, 7.1_0.1.02, 7.1_0.2.06, 7.2_0.0.03, 7.10, 7.10_.0.06s | — |
| dell bsafe_ssl-j | 3.0, 3.0.1, 3.1 | — |
| hp wbem | a.01.05.08, a.02.00.00, a.02.00.01 | — |
| lite speed_technologies_litespeed_web_server | 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.1, 1.2.1, 1.2.2, 1.2_rc1, 1.2_rc2, 1.3, 1.3.1, 1.3_rc1, 1.3_rc2, 1.3_rc3 | — |
| neoteris instant_virtual_extranet | 3.0, 3.1, 3.2, 3.3, 3.3.1 | — |
| novell edirectory | 8.0, 8.5, 8.5.12a, 8.5.27, 8.6.2, 8.7, 8.7.1 | — |
| novell imanager | 1.5, 2.0 | — |
| redhat openssl | 0.9.6-15, 0.9.6b-3, 0.9.7a-2 | — |
| sgi propack | 2.3, 2.4, 3.0 | — |
| stonesoft servercluster | 2.5, 2.5.2 | — |
| stonesoft stonebeat_fullcluster | 1_2.0, 1_3.0, 2.0, 2.5, 3.0 | — |
| stonesoft stonebeat_securitycluster | 2.0, 2.5 | — |
| stonesoft stonebeat_webcluster | 2.0, 2.5 | — |
| stonesoft stonegate | 1.5.17, 1.5.18, 1.6.2, 1.6.3, 1.7, 1.7.1, 1.7.2, 2.0.1, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.1, 2.2, 2.2.1, 2.2.4 | — |
| stonesoft stonegate_vpn_client | 1.7, 1.7.2, 2.0, 2.0.7, 2.0.8, 2.0.9 | — |
| tarantella tarantella_enterprise | 3.20 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.