Vulnerability Intelligence Report
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
Exploitability:3.9
Impact Score:3.6
EPSS Probability:9.54%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-476 ↗CWE-476 NULL Pointer Dereference
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| cisco | firewall_services_module | 1.1.2, 1.1.3, 1.1_\(3.005\), 2.1_\(0.208\) |
| hp | aaa_server | all |
| hp | apache-based_web_server | 2.0.43.00, 2.0.43.04 |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| cisco | ciscoworks_common_services | 2.2 |
| avaya | converged_communications_server | 2.0 |
| avaya | sg200 | 4.4, 4.31.29 |
| avaya | sg203 | 4.4, 4.31.29 |
| avaya | sg208 | 4.4 |
| avaya | sg5 | 4.2, 4.3, 4.4 |
| apple | mac_os_x | 10.3.3 |
| apple | mac_os_x_server | 10.3.3 |
| freebsd | freebsd | 4.8, 4.9, 5.1, 5.2, 5.2.1 |
| hp | hp-ux | 8.05, 11.00, 11.11, 11.23 |
| openbsd | openbsd | 3.3, 3.4 |
| redhat | enterprise_linux | 3.0 |
| redhat | enterprise_linux_desktop | 3.0 |
| redhat | linux | 7.2, 7.3, 8.0 |
| sco | openserver | 5.0.6, 5.0.7 |
| cisco | ios | 12.1\(11\)e, 12.1\(11b\)e, 12.1\(11b\)e12, 12.1\(11b\)e14, 12.1\(13\)e9, 12.1\(19\)e1, 12.2\(14\)sy, 12.2\(14\)sy1, 12.2sy, 12.2za |
| 4d | webstar | 4.0, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.3, 5.3.1 |
| avaya | intuity_audix | 5.1.46, s3210, s3400 |
| avaya | vsu | 5, 5x, 100_r2.0.1, 500, 2000_r2.0.1, 5000_r2.0.1, 7500_r2.0.1, 10000_r2.0.1 |
| checkpoint | firewall-1 | 2.0, next_generation_fp0, next_generation_fp1, next_generation_fp2 |
| checkpoint | provider-1 | 4.1 |
| checkpoint | vpn-1 | next_generation_fp0, next_generation_fp1, next_generation_fp2, vsx_ng_with_application_intelligence |
| cisco | access_registrar | all |
| cisco | application_and_content_networking_software | all |
| cisco | css_secure_content_accelerator | 1.0, 2.0 |
| cisco | css11000_content_services_switch | all |
| cisco | okena_stormwatch | 3.2 |
| cisco | pix_firewall | 6.2.2_.111 |
| cisco | threat_response | all |
| cisco | webns | 6.10, 6.10_b4, 7.1_0.1.02, 7.1_0.2.06, 7.2_0.0.03, 7.10, 7.10_.0.06s |
| dell | bsafe_ssl-j | 3.0, 3.0.1, 3.1 |
| hp | wbem | a.01.05.08, a.02.00.00, a.02.00.01 |
| lite | speed_technologies_litespeed_web_server | 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.1, 1.2.1, 1.2.2, 1.2_rc1, 1.2_rc2, 1.3, 1.3.1, 1.3_rc1, 1.3_rc2, 1.3_rc3 |
| neoteris | instant_virtual_extranet | 3.0, 3.1, 3.2, 3.3, 3.3.1 |
| novell | edirectory | 8.0, 8.5, 8.5.12a, 8.5.27, 8.6.2, 8.7, 8.7.1 |
| novell | imanager | 1.5, 2.0 |
| openssl | openssl | 0.9.6c, 0.9.6d, 0.9.6e, 0.9.6f, 0.9.6g, 0.9.6h, 0.9.6i, 0.9.6j, 0.9.6k, 0.9.7, 0.9.7a, 0.9.7b, 0.9.7c |
| redhat | openssl | 0.9.6-15, 0.9.6b-3, 0.9.7a-2 |
| sgi | propack | 2.3, 2.4, 3.0 |
| stonesoft | servercluster | 2.5, 2.5.2 |
| stonesoft | stonebeat_fullcluster | 1_2.0, 1_3.0, 2.0, 2.5, 3.0 |
| stonesoft | stonebeat_securitycluster | 2.0, 2.5 |
| stonesoft | stonebeat_webcluster | 2.0, 2.5 |
| stonesoft | stonegate | 1.5.17, 1.5.18, 1.6.2, 1.6.3, 1.7, 1.7.1, 1.7.2, 2.0.1, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.1, 2.2, 2.2.1, 2.2.4 |
| stonesoft | stonegate_vpn_client | 1.7, 1.7.2, 2.0, 2.0.7, 2.0.8, 2.0.9 |
| tarantella | tarantella_enterprise | 3.20, 3.30, 3.40 |
| vmware | gsx_server | 2.0, 2.0.1_build_2129, 2.5.1, 2.5.1_build_5336, 3.0_build_7592 |
| avaya | s8300 | r2.0.0, r2.0.1 |
| avaya | s8500 | r2.0.0, r2.0.1 |
| avaya | s8700 | r2.0.0, r2.0.1 |
| bluecoat | proxysg | all |
| cisco | call_manager | all |
| cisco | content_services_switch_11500 | all |
| cisco | gss_4480_global_site_selector | all |
| cisco | gss_4490_global_site_selector | all |
| cisco | mds_9000 | all |
| cisco | secure_content_accelerator | 10000 |
| securecomputing | sidewinder | 5.2, 5.2.0.01, 5.2.0.02, 5.2.0.03, 5.2.0.04, 5.2.1, 5.2.1.02 |
| sun | crypto_accelerator_4000 | 1.0 |
| bluecoat | cacheos_ca_sa | 4.1.10, 4.1.12 |
| cisco | pix_firewall_software | 6.0, 6.0\(1\), 6.0\(2\), 6.0\(3\), 6.0\(4\), 6.0\(4.101\), 6.1, 6.1\(1\), 6.1\(2\), 6.1\(3\), 6.1\(4\), 6.1\(5\), 6.2, 6.2\(1\), 6.2\(2\), 6.2\(3\), 6.2\(3.100\), 6.3, 6.3\(1\), 6.3\(2\), 6.3\(3.102\), 6.3\(3.109\) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
9.537%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2004-01-19T00:00:00 |
| Published | 2004-03-18T05:00:00 |
| Patch Date | 2004-03-17 |
| Last Updated | 2025-01-16T17:33:22 |
Community Chatter & Buzz