CVE - CVE-2004-0079

CVE-ID
CVE-2004-0079	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20040317 New OpenSSL releases fix denial of service attacks [17 March 2004] URL:http://marc.info/?l=bugtraq&m=107953412903636&w=2 CONFIRM:http://www.openssl.org/news/secadv_20040317.txt MISC:http://www.uniras.gov.uk/vuls/2004/224012/index.htm CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm CONFIRM:http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US CISCO:20040317 Cisco OpenSSL Implementation Vulnerability URL:http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml APPLE:APPLE-SA-2005-08-15 URL:http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html APPLE:APPLE-SA-2005-08-17 URL:http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html CONECTIVA:CLA-2004:834 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834 DEBIAN:DSA-465 URL:http://www.debian.org/security/2004/dsa-465 ENGARDE:ESA-20040317-003 URL:http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html FEDORA:FEDORA-2004-095 URL:http://fedoranews.org/updates/FEDORA-2004-095.shtml FEDORA:FEDORA-2005-1042 URL:http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html FREEBSD:FreeBSD-SA-04:05 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc GENTOO:GLSA-200403-03 URL:http://security.gentoo.org/glsa/glsa-200403-03.xml HP:SSRT4717 URL:http://marc.info/?l=bugtraq&m=108403806509920&w=2 MANDRAKE:MDKSA-2004:023 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:023 NETBSD:NetBSD-SA2004-005 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc REDHAT:RHSA-2004:120 URL:http://www.redhat.com/support/errata/RHSA-2004-120.html REDHAT:RHSA-2004:121 URL:http://www.redhat.com/support/errata/RHSA-2004-121.html REDHAT:RHSA-2004:139 URL:http://www.redhat.com/support/errata/RHSA-2004-139.html REDHAT:RHSA-2005:830 URL:http://www.redhat.com/support/errata/RHSA-2005-830.html REDHAT:RHSA-2005:829 URL:http://www.redhat.com/support/errata/RHSA-2005-829.html SCO:SCOSA-2004.10 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt SLACKWARE:SSA:2004-077 URL:http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961 SUSE:SuSE-SA:2004:007 URL:http://www.novell.com/linux/security/advisories/2004_07_openssl.html SUNALERT:57524 URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524 TRUSTIX:2004-0012 URL:http://www.trustix.org/errata/2004/0012 CONFIRM:http://docs.info.apple.com/article.html?artnum=61798 CONFIRM:http://lists.apple.com/mhonarc/security-announce/msg00045.html CERT:TA04-078A URL:http://www.us-cert.gov/cas/techalerts/TA04-078A.html CERT-VN:VU#288574 URL:http://www.kb.cert.org/vuls/id/288574 CIAC:O-101 URL:http://www.ciac.org/ciac/bulletins/o-101.shtml BID:9899 URL:http://www.securityfocus.com/bid/9899 OVAL:oval:org.mitre.oval:def:2621 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621 OVAL:oval:org.mitre.oval:def:870 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A870 OVAL:oval:org.mitre.oval:def:975 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A975 OVAL:oval:org.mitre.oval:def:5770 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5770 OVAL:oval:org.mitre.oval:def:9779 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9779 SECUNIA:11139 URL:http://secunia.com/advisories/11139 SECUNIA:17401 URL:http://secunia.com/advisories/17401 SECUNIA:17381 URL:http://secunia.com/advisories/17381 SECUNIA:17398 URL:http://secunia.com/advisories/17398 SECUNIA:18247 URL:http://secunia.com/advisories/18247 XF:openssl-dochangecipherspec-dos(15505) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/15505
Assigning CNA
N/A
Date Entry Created
20040119	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20040119)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org