CVE-2004-0081

CWE-39912 documents8 sources
Severity
5.0MEDIUM
EPSS
2.4%
top 14.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
55
4D WebstarApple MAC OS XApple MAC OS X Server+52 more
Timeline
PublishedNov 23
Latest updateMay 3

Description

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages54 packages

▶Debianopenssl< 0.9.6d-1+3
▶NVDredhat/openssl0.9.6-15, 0.9.6b-3, 0.9.7a-2+2
▶NVDopenssl/openssl13 versions+12

Also affects: Freebsd 4.8, 4.9, 5.1, 5.2, 5.2.1, Enterprise Linux 3.0

🔴Vulnerability Details

3
GHSA
GHSA-pcwf-qwvv-qjg3: OpenSSL 0↗2022-05-03
▶
OSV
CVE-2004-0081: OpenSSL 0↗2004-11-23
▶
CVEList
CVE-2004-0081: OpenSSL 0↗2004-03-18
▶

📋Vendor Advisories

4
Red Hat
security flaw↗2004-03-17
▶
Cisco
Cisco OpenSSL Implementation Vulnerability↗2004-03-17
▶
Debian
CVE-2004-0081: openssl - OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, whic...↗2004
▶
Red Hat
CVE-2005-1730: Multiple vulnerabilities in the OpenSSL ASN↗
▶

💬Community

3
Bugzilla
CVE-2004-0081 security flaw↗2018-08-16
▶
Bugzilla
CAN-2003-0977 fix pushed for RH9, but not FC1↗2004-03-20
▶
Bugzilla
CAN-2004-0081 OpenSSL flaw↗2004-03-08
▶