The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
AND |
|
History
No history.
Information
Published : 2004-11-23 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2004-0112
Mitre link : CVE-2004-0112
CVE.ORG link : CVE-2004-0112
JSON object : View
Products Affected
sco
- openserver
openssl
- openssl
hp
- apache-based_web_server
- hp-ux
- aaa_server
- wbem
redhat
- enterprise_linux
- openssl
- enterprise_linux_desktop
- linux
apple
- mac_os_x_server
- mac_os_x
stonesoft
- servercluster
- stonebeat_webcluster
- stonebeat_fullcluster
- stonebeat_securitycluster
cisco
- gss_4490_global_site_selector
- firewall_services_module
- secure_content_accelerator
- access_registrar
- ciscoworks_common_management_foundation
- okena_stormwatch
- gss_4480_global_site_selector
- pix_firewall
- ios
- call_manager
- pix_firewall_software
- css11000_content_services_switch
- content_services_switch_11500
- css_secure_content_accelerator
- mds_9000
- webns
- threat_response
- ciscoworks_common_services
- application_and_content_networking_software
novell
- imanager
- edirectory
openbsd
- openbsd
forcepoint
- stonegate
checkpoint
- vpn-1
- firewall-1
- provider-1
freebsd
- freebsd
avaya
- intuity_audix
- sg200
- s8500
- sg5
- sg203
- converged_communications_server
- vsu
- sg208
- s8300
- s8700
securecomputing
- sidewinder
neoteris
- instant_virtual_extranet
vmware
- gsx_server
dell
- bsafe_ssl-j
sun
- crypto_accelerator_4000
bluecoat
- proxysg
- cacheos_ca_sa
sgi
- propack
4d
- webstar
symantec
- clientless_vpn_gateway_4400
tarantella
- tarantella_enterprise
litespeedtech
- litespeed_web_server
CWE
CWE-125
Out-of-bounds Read