The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
History
No history.
Information
Published : 2004-11-23 05:00
Updated : 2023-12-28 15:33
NVD link : CVE-2004-0079
Mitre link : CVE-2004-0079
CVE.ORG link : CVE-2004-0079
JSON object : View
Products Affected
stonesoft
- servercluster
- stonebeat_fullcluster
- stonegate
- stonegate_vpn_client
- stonebeat_securitycluster
- stonebeat_webcluster
cisco
- ciscoworks_common_management_foundation
- mds_9000
- application_and_content_networking_software
- okena_stormwatch
- call_manager
- firewall_services_module
- ciscoworks_common_services
- secure_content_accelerator
- content_services_switch_11500
- pix_firewall
- pix_firewall_software
- gss_4490_global_site_selector
- css_secure_content_accelerator
- webns
- css11000_content_services_switch
- access_registrar
- gss_4480_global_site_selector
- threat_response
- ios
avaya
- sg5
- sg203
- s8700
- converged_communications_server
- sg208
- vsu
- intuity_audix
- s8500
- s8300
- sg200
hp
- aaa_server
- wbem
- apache-based_web_server
- hp-ux
openbsd
- openbsd
securecomputing
- sidewinder
dell
- bsafe_ssl-j
bluecoat
- cacheos_ca_sa
- proxysg
tarantella
- tarantella_enterprise
checkpoint
- provider-1
- vpn-1
- firewall-1
neoteris
- instant_virtual_extranet
redhat
- openssl
- enterprise_linux
- enterprise_linux_desktop
- linux
apple
- mac_os_x
- mac_os_x_server
freebsd
- freebsd
openssl
- openssl
novell
- edirectory
- imanager
sun
- crypto_accelerator_4000
sco
- openserver
sgi
- propack
symantec
- clientless_vpn_gateway_4400
vmware
- gsx_server
lite
- speed_technologies_litespeed_web_server
4d
- webstar
CWE
CWE-476
NULL Pointer Dereference
