Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2004-0112

Summary
Assigner-mitre
Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca
Published At-18 Mar, 2004 | 05:00
Updated At-08 Aug, 2024 | 00:10
Rejected At-
Credits

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:mitre
Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca
Published At:18 Mar, 2004 | 05:00
Updated At:08 Aug, 2024 | 00:10
Rejected At:
▼CVE Numbering Authority (CNA)

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://www.securityfocus.com/bid/9899
vdb-entry
x_refsource_BID
http://marc.info/?l=bugtraq&m=108403806509920&w=2
vendor-advisory
x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2004-121.html
vendor-advisory
x_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDKSA-2004:023
vendor-advisory
x_refsource_MANDRAKE
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
vendor-advisory
x_refsource_CONECTIVA
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
vendor-advisory
x_refsource_SCO
http://www.uniras.gov.uk/vuls/2004/224012/index.htm
x_refsource_MISC
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
vendor-advisory
x_refsource_SUNALERT
http://www.novell.com/linux/security/advisories/2004_07_openssl.html
vendor-advisory
x_refsource_SUSE
http://lists.apple.com/mhonarc/security-announce/msg00045.html
x_refsource_CONFIRM
http://www.openssl.org/news/secadv_20040317.txt
x_refsource_CONFIRM
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc
vendor-advisory
x_refsource_NETBSD
http://www.ciac.org/ciac/bulletins/o-101.shtml
third-party-advisory
government-resource
x_refsource_CIAC
http://www.us-cert.gov/cas/techalerts/TA04-078A.html
third-party-advisory
x_refsource_CERT
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049
vdb-entry
signature
x_refsource_OVAL
https://exchange.xforce.ibmcloud.com/vulnerabilities/15508
vdb-entry
x_refsource_XF
http://www.kb.cert.org/vuls/id/484726
third-party-advisory
x_refsource_CERT-VN
http://security.gentoo.org/glsa/glsa-200403-03.xml
vendor-advisory
x_refsource_GENTOO
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580
vdb-entry
signature
x_refsource_OVAL
http://secunia.com/advisories/11139
third-party-advisory
x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2004-120.html
vendor-advisory
x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=107953412903636&w=2
mailing-list
x_refsource_BUGTRAQ
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
vendor-advisory
x_refsource_APPLE
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961
vendor-advisory
x_refsource_SLACKWARE
http://www.trustix.org/errata/2004/0012
vendor-advisory
x_refsource_TRUSTIX
http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
vendor-advisory
x_refsource_CISCO
http://docs.info.apple.com/article.html?artnum=61798
x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
vendor-advisory
x_refsource_APPLE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928
vdb-entry
signature
x_refsource_OVAL
Hyperlink: http://www.securityfocus.com/bid/9899
Resource:
vdb-entry
x_refsource_BID
Hyperlink: http://marc.info/?l=bugtraq&m=108403806509920&w=2
Resource:
vendor-advisory
x_refsource_HP
Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-121.html
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2004:023
Resource:
vendor-advisory
x_refsource_MANDRAKE
Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
Resource:
vendor-advisory
x_refsource_CONECTIVA
Hyperlink: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
Resource:
vendor-advisory
x_refsource_SCO
Hyperlink: http://www.uniras.gov.uk/vuls/2004/224012/index.htm
Resource:
x_refsource_MISC
Hyperlink: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
Resource:
vendor-advisory
x_refsource_SUNALERT
Hyperlink: http://www.novell.com/linux/security/advisories/2004_07_openssl.html
Resource:
vendor-advisory
x_refsource_SUSE
Hyperlink: http://lists.apple.com/mhonarc/security-announce/msg00045.html
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.openssl.org/news/secadv_20040317.txt
Resource:
x_refsource_CONFIRM
Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc
Resource:
vendor-advisory
x_refsource_NETBSD
Hyperlink: http://www.ciac.org/ciac/bulletins/o-101.shtml
Resource:
third-party-advisory
government-resource
x_refsource_CIAC
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA04-078A.html
Resource:
third-party-advisory
x_refsource_CERT
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049
Resource:
vdb-entry
signature
x_refsource_OVAL
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/15508
Resource:
vdb-entry
x_refsource_XF
Hyperlink: http://www.kb.cert.org/vuls/id/484726
Resource:
third-party-advisory
x_refsource_CERT-VN
Hyperlink: http://security.gentoo.org/glsa/glsa-200403-03.xml
Resource:
vendor-advisory
x_refsource_GENTOO
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580
Resource:
vdb-entry
signature
x_refsource_OVAL
Hyperlink: http://secunia.com/advisories/11139
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-120.html
Resource:
vendor-advisory
x_refsource_REDHAT
Hyperlink: http://marc.info/?l=bugtraq&m=107953412903636&w=2
Resource:
mailing-list
x_refsource_BUGTRAQ
Hyperlink: http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Resource:
vendor-advisory
x_refsource_APPLE
Hyperlink: http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961
Resource:
vendor-advisory
x_refsource_SLACKWARE
Hyperlink: http://www.trustix.org/errata/2004/0012
Resource:
vendor-advisory
x_refsource_TRUSTIX
Hyperlink: http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
Resource:
vendor-advisory
x_refsource_CISCO
Hyperlink: http://docs.info.apple.com/article.html?artnum=61798
Resource:
x_refsource_CONFIRM
Hyperlink: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Resource:
vendor-advisory
x_refsource_APPLE
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928
Resource:
vdb-entry
signature
x_refsource_OVAL
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://www.securityfocus.com/bid/9899
vdb-entry
x_refsource_BID
x_transferred
http://marc.info/?l=bugtraq&m=108403806509920&w=2
vendor-advisory
x_refsource_HP
x_transferred
http://www.redhat.com/support/errata/RHSA-2004-121.html
vendor-advisory
x_refsource_REDHAT
x_transferred
http://www.mandriva.com/security/advisories?name=MDKSA-2004:023
vendor-advisory
x_refsource_MANDRAKE
x_transferred
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
vendor-advisory
x_refsource_CONECTIVA
x_transferred
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
vendor-advisory
x_refsource_SCO
x_transferred
http://www.uniras.gov.uk/vuls/2004/224012/index.htm
x_refsource_MISC
x_transferred
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
vendor-advisory
x_refsource_SUNALERT
x_transferred
http://www.novell.com/linux/security/advisories/2004_07_openssl.html
vendor-advisory
x_refsource_SUSE
x_transferred
http://lists.apple.com/mhonarc/security-announce/msg00045.html
x_refsource_CONFIRM
x_transferred
http://www.openssl.org/news/secadv_20040317.txt
x_refsource_CONFIRM
x_transferred
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc
vendor-advisory
x_refsource_NETBSD
x_transferred
http://www.ciac.org/ciac/bulletins/o-101.shtml
third-party-advisory
government-resource
x_refsource_CIAC
x_transferred
http://www.us-cert.gov/cas/techalerts/TA04-078A.html
third-party-advisory
x_refsource_CERT
x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049
vdb-entry
signature
x_refsource_OVAL
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/15508
vdb-entry
x_refsource_XF
x_transferred
http://www.kb.cert.org/vuls/id/484726
third-party-advisory
x_refsource_CERT-VN
x_transferred
http://security.gentoo.org/glsa/glsa-200403-03.xml
vendor-advisory
x_refsource_GENTOO
x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580
vdb-entry
signature
x_refsource_OVAL
x_transferred
http://secunia.com/advisories/11139
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.redhat.com/support/errata/RHSA-2004-120.html
vendor-advisory
x_refsource_REDHAT
x_transferred
http://marc.info/?l=bugtraq&m=107953412903636&w=2
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
vendor-advisory
x_refsource_APPLE
x_transferred
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961
vendor-advisory
x_refsource_SLACKWARE
x_transferred
http://www.trustix.org/errata/2004/0012
vendor-advisory
x_refsource_TRUSTIX
x_transferred
http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
vendor-advisory
x_refsource_CISCO
x_transferred
http://docs.info.apple.com/article.html?artnum=61798
x_refsource_CONFIRM
x_transferred
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
vendor-advisory
x_refsource_APPLE
x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928
vdb-entry
signature
x_refsource_OVAL
x_transferred
Hyperlink: http://www.securityfocus.com/bid/9899
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://marc.info/?l=bugtraq&m=108403806509920&w=2
Resource:
vendor-advisory
x_refsource_HP
x_transferred
Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-121.html
Resource:
vendor-advisory
x_refsource_REDHAT
x_transferred
Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2004:023
Resource:
vendor-advisory
x_refsource_MANDRAKE
x_transferred
Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
Resource:
vendor-advisory
x_refsource_CONECTIVA
x_transferred
Hyperlink: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
Resource:
vendor-advisory
x_refsource_SCO
x_transferred
Hyperlink: http://www.uniras.gov.uk/vuls/2004/224012/index.htm
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
Resource:
vendor-advisory
x_refsource_SUNALERT
x_transferred
Hyperlink: http://www.novell.com/linux/security/advisories/2004_07_openssl.html
Resource:
vendor-advisory
x_refsource_SUSE
x_transferred
Hyperlink: http://lists.apple.com/mhonarc/security-announce/msg00045.html
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.openssl.org/news/secadv_20040317.txt
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc
Resource:
vendor-advisory
x_refsource_NETBSD
x_transferred
Hyperlink: http://www.ciac.org/ciac/bulletins/o-101.shtml
Resource:
third-party-advisory
government-resource
x_refsource_CIAC
x_transferred
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA04-078A.html
Resource:
third-party-advisory
x_refsource_CERT
x_transferred
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049
Resource:
vdb-entry
signature
x_refsource_OVAL
x_transferred
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/15508
Resource:
vdb-entry
x_refsource_XF
x_transferred
Hyperlink: http://www.kb.cert.org/vuls/id/484726
Resource:
third-party-advisory
x_refsource_CERT-VN
x_transferred
Hyperlink: http://security.gentoo.org/glsa/glsa-200403-03.xml
Resource:
vendor-advisory
x_refsource_GENTOO
x_transferred
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580
Resource:
vdb-entry
signature
x_refsource_OVAL
x_transferred
Hyperlink: http://secunia.com/advisories/11139
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-120.html
Resource:
vendor-advisory
x_refsource_REDHAT
x_transferred
Hyperlink: http://marc.info/?l=bugtraq&m=107953412903636&w=2
Resource:
mailing-list
x_refsource_BUGTRAQ
x_transferred
Hyperlink: http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Resource:
vendor-advisory
x_refsource_APPLE
x_transferred
Hyperlink: http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961
Resource:
vendor-advisory
x_refsource_SLACKWARE
x_transferred
Hyperlink: http://www.trustix.org/errata/2004/0012
Resource:
vendor-advisory
x_refsource_TRUSTIX
x_transferred
Hyperlink: http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
Resource:
vendor-advisory
x_refsource_CISCO
x_transferred
Hyperlink: http://docs.info.apple.com/article.html?artnum=61798
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Resource:
vendor-advisory
x_refsource_APPLE
x_transferred
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928
Resource:
vdb-entry
signature
x_refsource_OVAL
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:cve@mitre.org
Published At:23 Nov, 2004 | 05:00
Updated At:03 Apr, 2025 | 01:03

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
Type: Primary
Version: 2.0
Base score: 5.0
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P
CPE Matches

Cisco Systems, Inc.
cisco
>>firewall_services_module>>*
cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>firewall_services_module>>1.1.2
cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>firewall_services_module>>1.1.3
cpe:2.3:h:cisco:firewall_services_module:1.1.3:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>firewall_services_module>>1.1_\(3.005\)
cpe:2.3:h:cisco:firewall_services_module:1.1_\(3.005\):*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>firewall_services_module>>2.1_\(0.208\)
cpe:2.3:h:cisco:firewall_services_module:2.1_\(0.208\):*:*:*:*:*:*:*
HP Inc.
hp
>>aaa_server>>*
cpe:2.3:h:hp:aaa_server:*:*:*:*:*:*:*:*
HP Inc.
hp
>>apache-based_web_server>>2.0.43.00
cpe:2.3:h:hp:apache-based_web_server:2.0.43.00:*:*:*:*:*:*:*
HP Inc.
hp
>>apache-based_web_server>>2.0.43.04
cpe:2.3:h:hp:apache-based_web_server:2.0.43.04:*:*:*:*:*:*:*
Symantec Corporation
symantec
>>clientless_vpn_gateway_4400>>5.0
cpe:2.3:h:symantec:clientless_vpn_gateway_4400:5.0:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ciscoworks_common_management_foundation>>2.1
cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ciscoworks_common_services>>2.2
cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*
Avaya LLC
avaya
>>converged_communications_server>>2.0
cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*
Avaya LLC
avaya
>>sg200>>4.4
cpe:2.3:h:avaya:sg200:4.4:*:*:*:*:*:*:*
Avaya LLC
avaya
>>sg200>>4.31.29
cpe:2.3:h:avaya:sg200:4.31.29:*:*:*:*:*:*:*
Avaya LLC
avaya
>>sg203>>4.4
cpe:2.3:h:avaya:sg203:4.4:*:*:*:*:*:*:*
Avaya LLC
avaya
>>sg203>>4.31.29
cpe:2.3:h:avaya:sg203:4.31.29:*:*:*:*:*:*:*
Avaya LLC
avaya
>>sg208>>*
cpe:2.3:h:avaya:sg208:*:*:*:*:*:*:*:*
Avaya LLC
avaya
>>sg208>>4.4
cpe:2.3:h:avaya:sg208:4.4:*:*:*:*:*:*:*
Avaya LLC
avaya
>>sg5>>4.2
cpe:2.3:h:avaya:sg5:4.2:*:*:*:*:*:*:*
Avaya LLC
avaya
>>sg5>>4.3
cpe:2.3:h:avaya:sg5:4.3:*:*:*:*:*:*:*
Avaya LLC
avaya
>>sg5>>4.4
cpe:2.3:h:avaya:sg5:4.4:*:*:*:*:*:*:*
Apple Inc.
apple
>>mac_os_x>>10.3.3
cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*
Apple Inc.
apple
>>mac_os_x_server>>10.3.3
cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*
FreeBSD Foundation
freebsd
>>freebsd>>4.8
cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*
FreeBSD Foundation
freebsd
>>freebsd>>4.8
cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*
FreeBSD Foundation
freebsd
>>freebsd>>4.9
cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*
FreeBSD Foundation
freebsd
>>freebsd>>5.1
cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*
FreeBSD Foundation
freebsd
>>freebsd>>5.1
cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*
FreeBSD Foundation
freebsd
>>freebsd>>5.1
cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*
FreeBSD Foundation
freebsd
>>freebsd>>5.2
cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*
FreeBSD Foundation
freebsd
>>freebsd>>5.2.1
cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*
HP Inc.
hp
>>hp-ux>>8.05
cpe:2.3:o:hp:hp-ux:8.05:*:*:*:*:*:*:*
HP Inc.
hp
>>hp-ux>>11.00
cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
HP Inc.
hp
>>hp-ux>>11.11
cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*
HP Inc.
hp
>>hp-ux>>11.23
cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*
OpenBSD
openbsd
>>openbsd>>3.3
cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*
OpenBSD
openbsd
>>openbsd>>3.4
cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*
Red Hat, Inc.
redhat
>>enterprise_linux>>3.0
cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*
Red Hat, Inc.
redhat
>>enterprise_linux>>3.0
cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*
Red Hat, Inc.
redhat
>>enterprise_linux>>3.0
cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*
Red Hat, Inc.
redhat
>>enterprise_linux_desktop>>3.0
cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
Red Hat, Inc.
redhat
>>linux>>7.2
cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*
Red Hat, Inc.
redhat
>>linux>>7.3
cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*
Red Hat, Inc.
redhat
>>linux>>8.0
cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*
sco
sco
>>openserver>>5.0.6
cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*
sco
sco
>>openserver>>5.0.7
cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>12.1\(11\)e
cpe:2.3:o:cisco:ios:12.1\(11\)e:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>12.1\(11b\)e
cpe:2.3:o:cisco:ios:12.1\(11b\)e:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>12.1\(11b\)e12
cpe:2.3:o:cisco:ios:12.1\(11b\)e12:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>12.1\(11b\)e14
cpe:2.3:o:cisco:ios:12.1\(11b\)e14:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-125Primarynvd@nist.gov
CWE ID: CWE-125
Type: Primary
Source: nvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

Organization : Red Hat
Last Modified : 2007-03-14T00:00:00

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

References
HyperlinkSourceResource
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asccve@mitre.org
Broken Link
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txtcve@mitre.org
Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834cve@mitre.org
Broken Link
http://docs.info.apple.com/article.html?artnum=61798cve@mitre.org
Broken Link
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlcve@mitre.org
Mailing List
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlcve@mitre.org
Mailing List
http://lists.apple.com/mhonarc/security-announce/msg00045.htmlcve@mitre.org
Broken Link
http://marc.info/?l=bugtraq&m=107953412903636&w=2cve@mitre.org
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=108403806509920&w=2cve@mitre.org
Mailing List
Third Party Advisory
http://secunia.com/advisories/11139cve@mitre.org
Broken Link
http://security.gentoo.org/glsa/glsa-200403-03.xmlcve@mitre.org
Third Party Advisory
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524cve@mitre.org
Broken Link
http://www.ciac.org/ciac/bulletins/o-101.shtmlcve@mitre.org
Broken Link
http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtmlcve@mitre.org
Broken Link
http://www.kb.cert.org/vuls/id/484726cve@mitre.org
Third Party Advisory
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2004:023cve@mitre.org
Third Party Advisory
http://www.novell.com/linux/security/advisories/2004_07_openssl.htmlcve@mitre.org
Broken Link
http://www.openssl.org/news/secadv_20040317.txtcve@mitre.org
Broken Link
http://www.redhat.com/support/errata/RHSA-2004-120.htmlcve@mitre.org
Broken Link
http://www.redhat.com/support/errata/RHSA-2004-121.htmlcve@mitre.org
Broken Link
http://www.securityfocus.com/bid/9899cve@mitre.org
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961cve@mitre.org
Broken Link
http://www.trustix.org/errata/2004/0012cve@mitre.org
Broken Link
http://www.uniras.gov.uk/vuls/2004/224012/index.htmcve@mitre.org
Broken Link
http://www.us-cert.gov/cas/techalerts/TA04-078A.htmlcve@mitre.org
Broken Link
Third Party Advisory
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/15508cve@mitre.org
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049cve@mitre.org
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928cve@mitre.org
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580cve@mitre.org
Broken Link
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.ascaf854a3a-2127-422b-91ae-364da2661108
Broken Link
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txtaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://docs.info.apple.com/article.html?artnum=61798af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlaf854a3a-2127-422b-91ae-364da2661108
Mailing List
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlaf854a3a-2127-422b-91ae-364da2661108
Mailing List
http://lists.apple.com/mhonarc/security-announce/msg00045.htmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://marc.info/?l=bugtraq&m=107953412903636&w=2af854a3a-2127-422b-91ae-364da2661108
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=108403806509920&w=2af854a3a-2127-422b-91ae-364da2661108
Mailing List
Third Party Advisory
http://secunia.com/advisories/11139af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://security.gentoo.org/glsa/glsa-200403-03.xmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.ciac.org/ciac/bulletins/o-101.shtmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.kb.cert.org/vuls/id/484726af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2004:023af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.novell.com/linux/security/advisories/2004_07_openssl.htmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.openssl.org/news/secadv_20040317.txtaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.redhat.com/support/errata/RHSA-2004-120.htmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.redhat.com/support/errata/RHSA-2004-121.htmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.securityfocus.com/bid/9899af854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.trustix.org/errata/2004/0012af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.uniras.gov.uk/vuls/2004/224012/index.htmaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.us-cert.gov/cas/techalerts/TA04-078A.htmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/15508af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049af854a3a-2127-422b-91ae-364da2661108
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928af854a3a-2127-422b-91ae-364da2661108
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580af854a3a-2127-422b-91ae-364da2661108
Broken Link
Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://docs.info.apple.com/article.html?artnum=61798
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Source: cve@mitre.org
Resource:
Mailing List
Hyperlink: http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Source: cve@mitre.org
Resource:
Mailing List
Hyperlink: http://lists.apple.com/mhonarc/security-announce/msg00045.html
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://marc.info/?l=bugtraq&m=107953412903636&w=2
Source: cve@mitre.org
Resource:
Mailing List
Third Party Advisory
Hyperlink: http://marc.info/?l=bugtraq&m=108403806509920&w=2
Source: cve@mitre.org
Resource:
Mailing List
Third Party Advisory
Hyperlink: http://secunia.com/advisories/11139
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://security.gentoo.org/glsa/glsa-200403-03.xml
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.ciac.org/ciac/bulletins/o-101.shtml
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.kb.cert.org/vuls/id/484726
Source: cve@mitre.org
Resource:
Third Party Advisory
US Government Resource
Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2004:023
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://www.novell.com/linux/security/advisories/2004_07_openssl.html
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.openssl.org/news/secadv_20040317.txt
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-120.html
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-121.html
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.securityfocus.com/bid/9899
Source: cve@mitre.org
Resource:
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
Hyperlink: http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.trustix.org/errata/2004/0012
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.uniras.gov.uk/vuls/2004/224012/index.htm
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA04-078A.html
Source: cve@mitre.org
Resource:
Broken Link
Third Party Advisory
US Government Resource
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/15508
Source: cve@mitre.org
Resource:
Third Party Advisory
VDB Entry
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://docs.info.apple.com/article.html?artnum=61798
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List
Hyperlink: http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List
Hyperlink: http://lists.apple.com/mhonarc/security-announce/msg00045.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://marc.info/?l=bugtraq&m=107953412903636&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List
Third Party Advisory
Hyperlink: http://marc.info/?l=bugtraq&m=108403806509920&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List
Third Party Advisory
Hyperlink: http://secunia.com/advisories/11139
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://security.gentoo.org/glsa/glsa-200403-03.xml
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.ciac.org/ciac/bulletins/o-101.shtml
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.kb.cert.org/vuls/id/484726
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
US Government Resource
Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2004:023
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://www.novell.com/linux/security/advisories/2004_07_openssl.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.openssl.org/news/secadv_20040317.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-120.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.redhat.com/support/errata/RHSA-2004-121.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.securityfocus.com/bid/9899
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
Hyperlink: http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.trustix.org/errata/2004/0012
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.uniras.gov.uk/vuls/2004/224012/index.htm
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA04-078A.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Third Party Advisory
US Government Resource
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/15508
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
VDB Entry
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link

Change History

0
Information is not available yet

Similar CVEs

0Records found

Details not found