NVD

Id
70547  
Name
CVE-2004-0079  
Description
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2004-11-23  
Modified Date
2017-07-10  
Seq
2004-0079  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
363579 70547 CVE-2004-0079 FreeBSD-SA-04:05  View
363580 70547 CVE-2004-0079 NetBSD-SA2004-005  View
363581 70547 CVE-2004-0079 SCOSA-2004.10  View
363582 70547 CVE-2004-0079 CLA-2004:834  View
363583 70547 CVE-2004-0079 http://docs.info.apple.com/article.html?artnum=61798  View
363584 70547 CVE-2004-0079 FEDORA-2004-095  View
363585 70547 CVE-2004-0079 APPLE-SA-2005-08-17  View
363586 70547 CVE-2004-0079 APPLE-SA-2005-08-15  View
363587 70547 CVE-2004-0079 http://lists.apple.com/mhonarc/security-announce/msg00045.html  View
363588 70547 CVE-2004-0079 20040317 New OpenSSL releases fix denial of service attacks [17 March 2004]  View
363589 70547 CVE-2004-0079 SSRT4717  View
363590 70547 CVE-2004-0079 oval:org.mitre.oval:def:2621  View
363591 70547 CVE-2004-0079 oval:org.mitre.oval:def:5770  View
363592 70547 CVE-2004-0079 oval:org.mitre.oval:def:870  View
363593 70547 CVE-2004-0079 oval:org.mitre.oval:def:975  View
363594 70547 CVE-2004-0079 oval:org.mitre.oval:def:9779  View
363595 70547 CVE-2004-0079 GLSA-200403-03  View
363596 70547 CVE-2004-0079 57524  View
363597 70547 CVE-2004-0079 http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm  View
363598 70547 CVE-2004-0079 http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US  View
363599 70547 CVE-2004-0079 O-101  View
363600 70547 CVE-2004-0079 20040317 Cisco OpenSSL Implementation Vulnerability  View
363601 70547 CVE-2004-0079 DSA-465  View
363602 70547 CVE-2004-0079 VU#288574  View
363603 70547 CVE-2004-0079 ESA-20040317-003  View
363604 70547 CVE-2004-0079 MDKSA-2004:023  View
363605 70547 CVE-2004-0079 SuSE-SA:2004:007  View
363606 70547 CVE-2004-0079 http://www.openssl.org/news/secadv_20040317.txt  View
363607 70547 CVE-2004-0079 FEDORA-2005-1042  View
363608 70547 CVE-2004-0079 RHSA-2004:120  View
363609 70547 CVE-2004-0079 RHSA-2004:121  View
363610 70547 CVE-2004-0079 RHSA-2004:139  View
363611 70547 CVE-2004-0079 RHSA-2005:829  View
363612 70547 CVE-2004-0079 RHSA-2005:830  View
363613 70547 CVE-2004-0079 9899  View
363614 70547 CVE-2004-0079 SSA:2004-077  View
363615 70547 CVE-2004-0079 2004-0012  View
363616 70547 CVE-2004-0079 http://www.uniras.gov.uk/vuls/2004/224012/index.htm  View
363617 70547 CVE-2004-0079 TA04-078A  View
363618 70547 CVE-2004-0079 openssl-dochangecipherspec-dos(15505)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62745 JVNDB-2004-000086 OpenSSL の do_change_cipher_spec() 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL は、SSL/TLS の実装の不備により、do_change_cipher_spec() 関数において、NULL ポインタが適切に処理されない脆弱性が存在します。 CVE-2004-0079 8506 CVE-2004-0079 70547 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000086.html 2004-03-17 2007-04-01 View