CVE-2004-0112
Medium
Description
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Openssl
PublishedNov 23, 2004
First seenNov 23, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openssl openssl | 0.9.6c, 0.9.6d, 0.9.6e, 0.9.6f, 0.9.6g, 0.9.6h, 0.9.6i, 0.9.6j, 0.9.6k, 0.9.7, 0.9.7a, 0.9.7b, 0.9.7c | — |
| cisco firewall_services_module | No range specified, 1.1.2, 1.1.3, 1.1_\(3.005\), 2.1_\(0.208\) | — |
| hp aaa_server | No range specified | — |
| hp apache-based_web_server | 2.0.43.00, 2.0.43.04 | — |
| symantec clientless_vpn_gateway_4400 | 5.0 | — |
| cisco ciscoworks_common_management_foundation | 2.1 | — |
| cisco ciscoworks_common_services | 2.2 | — |
| avaya converged_communications_server | 2.0 | — |
| avaya sg200 | 4.4, 4.31.29 | — |
| avaya sg203 | 4.4, 4.31.29 | — |
| avaya sg208 | No range specified, 4.4 | — |
| avaya sg5 | 4.2, 4.3, 4.4 | — |
| apple mac_os_x | 10.3.3 | — |
| apple mac_os_x_server | 10.3.3 | — |
| freebsd freebsd | 4.8, 4.9, 5.1, 5.2, 5.2.1 | — |
| hp hp-ux | 8.05, 11.00, 11.11, 11.23 | — |
| openbsd openbsd | 3.3, 3.4 | — |
| redhat enterprise_linux | 3.0 | — |
| redhat enterprise_linux_desktop | 3.0 | — |
| redhat linux | 7.2, 7.3, 8.0 | — |
| sco openserver | 5.0.6, 5.0.7 | — |
| cisco ios | 12.1\(11\)e, 12.1\(11b\)e, 12.1\(11b\)e12, 12.1\(11b\)e14, 12.1\(13\)e9, 12.1\(19\)e1, 12.2\(14\)sy, 12.2\(14\)sy1, 12.2sy, 12.2za | — |
| 4d webstar | 4.0, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.3, 5.3.1 | — |
| avaya intuity_audix | No range specified, 5.1.46, s3210, s3400 | — |
| avaya vsu | 5, 5x, 100_r2.0.1, 500, 2000_r2.0.1, 5000_r2.0.1, 7500_r2.0.1, 10000_r2.0.1 | — |
| checkpoint firewall-1 | No range specified, 2.0, next_generation_fp0, next_generation_fp1, next_generation_fp2 | — |
| checkpoint provider-1 | 4.1 | — |
| checkpoint vpn-1 | next_generation_fp0, next_generation_fp1, next_generation_fp2, vsx_ng_with_application_intelligence | — |
| cisco access_registrar | No range specified | — |
| cisco application_and_content_networking_software | No range specified | — |
| cisco css_secure_content_accelerator | 1.0, 2.0 | — |
| cisco css11000_content_services_switch | No range specified | — |
| cisco okena_stormwatch | 3.2 | — |
| cisco pix_firewall | 6.2.2_.111 | — |
| cisco threat_response | No range specified | — |
| cisco webns | 6.10, 6.10_b4, 7.1_0.1.02, 7.1_0.2.06, 7.2_0.0.03, 7.10, 7.10_.0.06s | — |
| dell bsafe_ssl-j | 3.0, 3.0.1, 3.1 | — |
| forcepoint stonegate | 1.5.17, 1.5.18, 1.6.2, 1.6.3, 1.7, 1.7.1, 1.7.2, 2.0.1, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.1, 2.2, 2.2.1, 2.2.4 | — |
| hp wbem | a.01.05.08, a.02.00.00, a.02.00.01 | — |
| litespeedtech litespeed_web_server | 1.0.1 | — |
| neoteris instant_virtual_extranet | 3.0, 3.1, 3.2, 3.3, 3.3.1 | — |
| novell edirectory | 8.0, 8.5, 8.5.12a, 8.5.27, 8.6.2, 8.7, 8.7.1 | — |
| novell imanager | 1.5, 2.0 | — |
| redhat openssl | 0.9.6-15, 0.9.6b-3, 0.9.7a-2 | — |
| sgi propack | 2.3, 2.4, 3.0 | — |
| stonesoft servercluster | 2.5, 2.5.2 | — |
| stonesoft stonebeat_fullcluster | 1_2.0, 1_3.0, 2.0, 2.5, 3.0 | — |
| stonesoft stonebeat_securitycluster | 2.0, 2.5 | — |
| stonesoft stonebeat_webcluster | 2.0, 2.5 | — |
| tarantella tarantella_enterprise | 3.20, 3.30, 3.40 | — |
| vmware gsx_server | 2.0, 2.0.1_build_2129, 2.5.1, 2.5.1_build_5336, 3.0_build_7592 | — |
| avaya s8300 | r2.0.0, r2.0.1 | — |
| avaya s8500 | r2.0.0, r2.0.1 | — |
| avaya s8700 | r2.0.0, r2.0.1 | — |
| bluecoat proxysg | No range specified | — |
| cisco call_manager | No range specified | — |
| cisco content_services_switch_11500 | No range specified | — |
| cisco gss_4480_global_site_selector | No range specified | — |
| cisco gss_4490_global_site_selector | No range specified | — |
| cisco mds_9000 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.