NVD

Id
70549  
Name
CVE-2004-0081  
Description
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2004-11-23  
Modified Date
2017-07-10  
Seq
2004-0081  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
363628 70549 CVE-2004-0081 SCOSA-2004.10  View
363629 70549 CVE-2004-0081 20040304-01-U  View
363630 70549 CVE-2004-0081 CLA-2004:834  View
363631 70549 CVE-2004-0081 FEDORA-2004-095  View
363632 70549 CVE-2004-0081 20040317 Re: New OpenSSL releases fix denial of service attacks [17 March 2004]  View
363633 70549 CVE-2004-0081 20040508 [FLSA-2004:1395] Updated OpenSSL resolves security vulnerability  View
363634 70549 CVE-2004-0081 oval:org.mitre.oval:def:11755  View
363635 70549 CVE-2004-0081 oval:org.mitre.oval:def:871  View
363636 70549 CVE-2004-0081 oval:org.mitre.oval:def:902  View
363637 70549 CVE-2004-0081 RHSA-2004:119  View
363638 70549 CVE-2004-0081 GLSA-200403-03  View
363639 70549 CVE-2004-0081 57524  View
363640 70549 CVE-2004-0081 20040317 Cisco OpenSSL Implementation Vulnerability  View
363641 70549 CVE-2004-0081 DSA-465  View
363642 70549 CVE-2004-0081 VU#465542  View
363643 70549 CVE-2004-0081 ESA-20040317-003  View
363644 70549 CVE-2004-0081 RHSA-2004:120  View
363645 70549 CVE-2004-0081 RHSA-2004:121  View
363646 70549 CVE-2004-0081 RHSA-2004:139  View
363647 70549 CVE-2004-0081 9899  View
363648 70549 CVE-2004-0081 2004-0012  View
363649 70549 CVE-2004-0081 http://www.uniras.gov.uk/vuls/2004/224012/index.htm  View
363650 70549 CVE-2004-0081 TA04-078A  View
363651 70549 CVE-2004-0081 openssl-tls-dos(15509)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62746 JVNDB-2004-000087 OpenSSL における未知の TLS メッセージ形式の扱いによるサービス運用妨害 (DoS) の脆弱性 OpenSSL には、 TLS の実装に不備があるため、意図的に作成した TLS メッセージを含む SSL/TLS 通信を行うわれた場合、未知の TLS メッセージ形式を扱うことにより、 無限ループが発生する脆弱性が存在します。 CVE-2004-0081 8508 CVE-2004-0081 70549 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000087.html 2004-03-17 2007-04-01 View