NVD

Id
70576  
Name
CVE-2004-0112  
Description
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2004-11-23  
Modified Date
2017-07-10  
Seq
2004-0112  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
363860 70576 CVE-2004-0112 NetBSD-SA2004-005  View
363861 70576 CVE-2004-0112 SCOSA-2004.10  View
363862 70576 CVE-2004-0112 CLA-2004:834  View
363863 70576 CVE-2004-0112 http://docs.info.apple.com/article.html?artnum=61798  View
363864 70576 CVE-2004-0112 APPLE-SA-2005-08-17  View
363865 70576 CVE-2004-0112 APPLE-SA-2005-08-15  View
363866 70576 CVE-2004-0112 http://lists.apple.com/mhonarc/security-announce/msg00045.html  View
363867 70576 CVE-2004-0112 20040317 New OpenSSL releases fix denial of service attacks [17 March 2004]  View
363868 70576 CVE-2004-0112 SSRT4717  View
363869 70576 CVE-2004-0112 oval:org.mitre.oval:def:1049  View
363870 70576 CVE-2004-0112 oval:org.mitre.oval:def:928  View
363871 70576 CVE-2004-0112 oval:org.mitre.oval:def:9580  View
363872 70576 CVE-2004-0112 GLSA-200403-03  View
363873 70576 CVE-2004-0112 57524  View
363874 70576 CVE-2004-0112 O-101  View
363875 70576 CVE-2004-0112 20040317 Cisco OpenSSL Implementation Vulnerability  View
363876 70576 CVE-2004-0112 VU#484726  View
363877 70576 CVE-2004-0112 MDKSA-2004:023  View
363878 70576 CVE-2004-0112 SuSE-SA:2004:007  View
363879 70576 CVE-2004-0112 http://www.openssl.org/news/secadv_20040317.txt  View
363880 70576 CVE-2004-0112 RHSA-2004:120  View
363881 70576 CVE-2004-0112 RHSA-2004:121  View
363882 70576 CVE-2004-0112 9899  View
363883 70576 CVE-2004-0112 SSA:2004-077  View
363884 70576 CVE-2004-0112 2004-0012  View
363885 70576 CVE-2004-0112 http://www.uniras.gov.uk/vuls/2004/224012/index.htm  View
363886 70576 CVE-2004-0112 TA04-078A  View
363887 70576 CVE-2004-0112 openssl-kerberos-ciphersuites-dos(15508)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62747 JVNDB-2004-000088 OpenSSL における Kerberos 暗号スイート使用時の SSL/TLS ハンドシェイクによるサービス運用妨害 (DoS) の脆弱性 OpenSSL には、Kerberos 暗号スイートを利用した SSL/TLS 通信を行う場合、ハンドシェイクの際の鍵交換において、通信データの適切なチェックを行わない不備があり、意図的に作成した SSL/TLS ハンドシェイク通信を行うことにより、Kerberos 暗号スイートを有効に設定した OpenSSL を利用するアプリケーションがクラッシュする脆弱性が存在します。 CVE-2004-0112 8539 CVE-2004-0112 70576 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000088.html 2004-03-17 2007-04-01 View