CVE

Id
8540  
CVE No.
CVE-2004-0112  
Status
Candidate  
Description
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.  
Phase
Assigned (20040202)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
52763 8540 CVE-2004-0112 BUGTRAQ:20040317 New OpenSSL releases fix denial of service attacks [17 March 2004]  View
52764 8540 CVE-2004-0112 URL:http://marc.info/?l=bugtraq&m=107953412903636&w=2  View
52765 8540 CVE-2004-0112 CONFIRM:http://www.openssl.org/news/secadv_20040317.txt  View
52766 8540 CVE-2004-0112 MISC:http://www.uniras.gov.uk/vuls/2004/224012/index.htm  View
52767 8540 CVE-2004-0112 APPLE:APPLE-SA-2005-08-15  View
52768 8540 CVE-2004-0112 URL:http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html  View
52769 8540 CVE-2004-0112 APPLE:APPLE-SA-2005-08-17  View
52770 8540 CVE-2004-0112 URL:http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html  View
52771 8540 CVE-2004-0112 CISCO:20040317 Cisco OpenSSL Implementation Vulnerability  View
52772 8540 CVE-2004-0112 URL:http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml  View
52773 8540 CVE-2004-0112 CONECTIVA:CLA-2004:834  View
52774 8540 CVE-2004-0112 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834  View
52775 8540 CVE-2004-0112 GENTOO:GLSA-200403-03  View
52776 8540 CVE-2004-0112 URL:http://security.gentoo.org/glsa/glsa-200403-03.xml  View
52777 8540 CVE-2004-0112 MANDRAKE:MDKSA-2004:023  View
52778 8540 CVE-2004-0112 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:023  View
52779 8540 CVE-2004-0112 NETBSD:NetBSD-SA2004-005  View
52780 8540 CVE-2004-0112 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc  View
52781 8540 CVE-2004-0112 REDHAT:RHSA-2004:120  View
52782 8540 CVE-2004-0112 URL:http://www.redhat.com/support/errata/RHSA-2004-120.html  View
52783 8540 CVE-2004-0112 REDHAT:RHSA-2004:121  View
52784 8540 CVE-2004-0112 URL:http://www.redhat.com/support/errata/RHSA-2004-121.html  View
52785 8540 CVE-2004-0112 SCO:SCOSA-2004.10  View
52786 8540 CVE-2004-0112 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt  View
52787 8540 CVE-2004-0112 SLACKWARE:SSA:2004-077  View
52788 8540 CVE-2004-0112 URL:http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961  View
52789 8540 CVE-2004-0112 SUSE:SuSE-SA:2004:007  View
52790 8540 CVE-2004-0112 URL:http://www.novell.com/linux/security/advisories/2004_07_openssl.html  View
52791 8540 CVE-2004-0112 SUNALERT:57524  View
52792 8540 CVE-2004-0112 URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524  View
52793 8540 CVE-2004-0112 TRUSTIX:2004-0012  View
52794 8540 CVE-2004-0112 URL:http://www.trustix.org/errata/2004/0012  View
52795 8540 CVE-2004-0112 HP:SSRT4717  View
52796 8540 CVE-2004-0112 URL:http://marc.info/?l=bugtraq&m=108403806509920&w=2  View
52797 8540 CVE-2004-0112 CONFIRM:http://docs.info.apple.com/article.html?artnum=61798  View
52798 8540 CVE-2004-0112 CONFIRM:http://lists.apple.com/mhonarc/security-announce/msg00045.html  View
52799 8540 CVE-2004-0112 CERT:TA04-078A  View
52800 8540 CVE-2004-0112 URL:http://www.us-cert.gov/cas/techalerts/TA04-078A.html  View
52801 8540 CVE-2004-0112 CERT-VN:VU#484726  View
52802 8540 CVE-2004-0112 URL:http://www.kb.cert.org/vuls/id/484726  View
52803 8540 CVE-2004-0112 CIAC:O-101  View
52804 8540 CVE-2004-0112 URL:http://www.ciac.org/ciac/bulletins/o-101.shtml  View
52805 8540 CVE-2004-0112 BID:9899  View
52806 8540 CVE-2004-0112 URL:http://www.securityfocus.com/bid/9899  View
52807 8540 CVE-2004-0112 OVAL:oval:org.mitre.oval:def:1049  View
52808 8540 CVE-2004-0112 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1049  View
52809 8540 CVE-2004-0112 OVAL:oval:org.mitre.oval:def:928  View
52810 8540 CVE-2004-0112 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:928  View
52811 8540 CVE-2004-0112 OVAL:oval:org.mitre.oval:def:9580  View
52812 8540 CVE-2004-0112 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9580  View
52813 8540 CVE-2004-0112 SECUNIA:11139  View
52814 8540 CVE-2004-0112 URL:http://secunia.com/advisories/11139  View
52815 8540 CVE-2004-0112 XF:openssl-kerberos-ciphersuites-dos(15508)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62729 JVNDB-2004-000070 Apache HTTP Server の mod_sslモジュールにおけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server に含まれている mod_ssl には SSL による通信を有効にしているポートで通常の SSL 通信を介さない HTTP リクエストを受信した場合、メモリリークが発生する脆弱性が存在します。 CVE-2004-0113 8540 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000070.html  View