CVE-2004-0079

Current Description

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

Referenced by CVEs:

CVE-2005-1730

Basic Data

Published	November 23, 2004
Last Modified	October 30, 2018
Assigner	cve@mitre.org
Data Type	CVE
Data Format	MITRE
Data Version	4.0
Problem Type	NVD-CWE-Other
CVE Data Version	4.0

Base Metric V2

CVSS 2 - Version	2.0
CVSS 2 - Vector String	AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 2 - Access Vector	NETWORK
CVSS 2 - Access Complexity	LOW
CVSS 2 - Authentication	NONE
CVSS 2 - Confidentiality Impact	NONE
CVSS 2 - Availability Impact	PARTIAL
CVSS 2 - Base Score	5.0
Severity	MEDIUM
Exploitability Score	10.0
Impact Score	2.9
Obtain All Privilege	false
Obtain User Privilege	false
Obtain Other Privilege	false

Base Metric V3

No data provided.

Configurations

OR - Configuration 1

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	Hardware	Cisco	Firewall Services Module	*	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Firewall Services Module	1.1.2	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Firewall Services Module	1.1.3	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Firewall Services Module	1.1_(3.005)	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Firewall Services Module	2.1_(0.208)	*	*	*	*	*	*	*
2.3	Hardware	Hp	Aaa Server	*	*	*	*	*	*	*	*
2.3	Hardware	Hp	Apache-based Web Server	2.0.43.00	*	*	*	*	*	*	*
2.3	Hardware	Hp	Apache-based Web Server	2.0.43.04	*	*	*	*	*	*	*
2.3	Hardware	Symantec	Clientless Vpn Gateway 4400	5.0	*	*	*	*	*	*	*

OR - Configuration 2

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	Application	Cisco	Ciscoworks Common Management Foundation	2.1	*	*	*	*	*	*	*
2.3	Application	Cisco	Ciscoworks Common Services	2.2	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Converged Communications Server	2.0	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Sg200	4.4	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Sg200	4.31.29	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Sg203	4.4	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Sg203	4.31.29	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Sg208	*	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Sg208	4.4	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Sg5	4.2	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Sg5	4.3	*	*	*	*	*	*	*
2.3	Hardware	Avaya	Sg5	4.4	*	*	*	*	*	*	*
2.3	OS	Apple	Mac Os X	10.3.3	*	*	*	*	*	*	*
2.3	OS	Apple	Mac Os X Server	10.3.3	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	4.8	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	4.8	releng	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	4.9	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	5.1	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	5.1	release	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	5.1	releng	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	5.2	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	5.2.1	release	*	*	*	*	*	*
2.3	OS	Hp	Hp-ux	8.05	*	*	*	*	*	*	*
2.3	OS	Hp	Hp-ux	11.00	*	*	*	*	*	*	*
2.3	OS	Hp	Hp-ux	11.11	*	*	*	*	*	*	*
2.3	OS	Hp	Hp-ux	11.23	*	*	*	*	*	*	*
2.3	OS	Openbsd	Openbsd	3.3	*	*	*	*	*	*	*
2.3	OS	Openbsd	Openbsd	3.4	*	*	*	*	*	*	*
2.3	OS	Redhat	Enterprise Linux	3.0	*	advanced_server	*	*	*	*	*
2.3	OS	Redhat	Enterprise Linux	3.0	*	enterprise_server	*	*	*	*	*
2.3	OS	Redhat	Enterprise Linux	3.0	*	workstation_server	*	*	*	*	*
2.3	OS	Redhat	Enterprise Linux Desktop	3.0	*	*	*	*	*	*	*
2.3	OS	Redhat	Linux	7.2	*	*	*	*	*	*	*
2.3	OS	Redhat	Linux	7.3	*	*	*	*	*	*	*
2.3	OS	Redhat	Linux	8.0	*	*	*	*	*	*	*
2.3	OS	Sco	Openserver	5.0.6	*	*	*	*	*	*	*
2.3	OS	Sco	Openserver	5.0.7	*	*	*	*	*	*	*

AND

OR - Configuration 3

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	OS	Cisco	Ios	12.1(11)e	*	*	*	*	*	*	*
2.3	OS	Cisco	Ios	12.1(11b)e	*	*	*	*	*	*	*
2.3	OS	Cisco	Ios	12.1(11b)e12	*	*	*	*	*	*	*
2.3	OS	Cisco	Ios	12.1(11b)e14	*	*	*	*	*	*	*
2.3	OS	Cisco	Ios	12.1(13)e9	*	*	*	*	*	*	*
2.3	OS	Cisco	Ios	12.1(19)e1	*	*	*	*	*	*	*
2.3	OS	Cisco	Ios	12.2(14)sy	*	*	*	*	*	*	*
2.3	OS	Cisco	Ios	12.2(14)sy1	*	*	*	*	*	*	*
2.3	OS	Cisco	Ios	12.2sy	*	*	*	*	*	*	*
2.3	OS	Cisco	Ios	12.2za	*	*	*	*	*	*	*

OR Running on/with:

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	Application	4d	Webstar	4.0	*	*	*	*	*	*	*
2.3	Application	4d	Webstar	5.2	*	*	*	*	*	*	*
2.3	Application	4d	Webstar	5.2.1	*	*	*	*	*	*	*
2.3	Application	4d	Webstar	5.2.2	*	*	*	*	*	*	*
2.3	Application	4d	Webstar	5.2.3	*	*	*	*	*	*	*
2.3	Application	4d	Webstar	5.2.4	*	*	*	*	*	*	*
2.3	Application	4d	Webstar	5.3	*	*	*	*	*	*	*
2.3	Application	4d	Webstar	5.3.1	*	*	*	*	*	*	*
2.3	Application	Avaya	Intuity Audix	*	*	lx	*	*	*	*	*
2.3	Application	Avaya	Intuity Audix	5.1.46	*	*	*	*	*	*	*
2.3	Application	Avaya	Intuity Audix	s3210	*	*	*	*	*	*	*
2.3	Application	Avaya	Intuity Audix	s3400	*	*	*	*	*	*	*
2.3	Application	Avaya	Vsu	5	*	*	*	*	*	*	*
2.3	Application	Avaya	Vsu	5x	*	*	*	*	*	*	*
2.3	Application	Avaya	Vsu	100_r2.0.1	*	*	*	*	*	*	*
2.3	Application	Avaya	Vsu	500	*	*	*	*	*	*	*
2.3	Application	Avaya	Vsu	2000_r2.0.1	*	*	*	*	*	*	*
2.3	Application	Avaya	Vsu	5000_r2.0.1	*	*	*	*	*	*	*
2.3	Application	Avaya	Vsu	7500_r2.0.1	*	*	*	*	*	*	*
2.3	Application	Avaya	Vsu	10000_r2.0.1	*	*	*	*	*	*	*
2.3	Application	Checkpoint	Firewall-1	*	*	vsx-ng-ai	*	*	*	*	*
2.3	Application	Checkpoint	Firewall-1	2.0	*	gx	*	*	*	*	*
2.3	Application	Checkpoint	Firewall-1	next_generation_fp0	*	*	*	*	*	*	*
2.3	Application	Checkpoint	Firewall-1	next_generation_fp1	*	*	*	*	*	*	*
2.3	Application	Checkpoint	Firewall-1	next_generation_fp2	*	*	*	*	*	*	*
2.3	Application	Checkpoint	Provider-1	4.1	*	*	*	*	*	*	*
2.3	Application	Checkpoint	Provider-1	4.1	sp1	*	*	*	*	*	*
2.3	Application	Checkpoint	Provider-1	4.1	sp2	*	*	*	*	*	*
2.3	Application	Checkpoint	Provider-1	4.1	sp3	*	*	*	*	*	*
2.3	Application	Checkpoint	Provider-1	4.1	sp4	*	*	*	*	*	*
2.3	Application	Checkpoint	Vpn-1	next_generation_fp0	*	*	*	*	*	*	*
2.3	Application	Checkpoint	Vpn-1	next_generation_fp1	*	*	*	*	*	*	*
2.3	Application	Checkpoint	Vpn-1	next_generation_fp2	*	*	*	*	*	*	*
2.3	Application	Checkpoint	Vpn-1	vsx_ng_with_application_intelligence	*	*	*	*	*	*	*
2.3	Application	Cisco	Access Registrar	*	*	*	*	*	*	*	*
2.3	Application	Cisco	Application And Content Networking Software	*	*	*	*	*	*	*	*
2.3	Application	Cisco	Css11000 Content Services Switch	*	*	*	*	*	*	*	*
2.3	Application	Cisco	Css Secure Content Accelerator	1.0	*	*	*	*	*	*	*
2.3	Application	Cisco	Css Secure Content Accelerator	2.0	*	*	*	*	*	*	*
2.3	Application	Cisco	Okena Stormwatch	3.2	*	*	*	*	*	*	*
2.3	Application	Cisco	Pix Firewall	6.2.2_.111	*	*	*	*	*	*	*
2.3	Application	Cisco	Threat Response	*	*	*	*	*	*	*	*
2.3	Application	Cisco	Webns	6.10	*	*	*	*	*	*	*
2.3	Application	Cisco	Webns	6.10_b4	*	*	*	*	*	*	*
2.3	Application	Cisco	Webns	7.1_0.1.02	*	*	*	*	*	*	*
2.3	Application	Cisco	Webns	7.1_0.2.06	*	*	*	*	*	*	*
2.3	Application	Cisco	Webns	7.2_0.0.03	*	*	*	*	*	*	*
2.3	Application	Cisco	Webns	7.10	*	*	*	*	*	*	*
2.3	Application	Cisco	Webns	7.10_.0.06s	*	*	*	*	*	*	*
2.3	Application	Hp	Wbem	a.01.05.08	*	*	*	*	*	*	*
2.3	Application	Hp	Wbem	a.02.00.00	*	*	*	*	*	*	*
2.3	Application	Hp	Wbem	a.02.00.01	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.0.1	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.0.2	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.0.3	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.1	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.1.1	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.2.1	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.2.2	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.2_rc1	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.2_rc2	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.3	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.3.1	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.3_rc1	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.3_rc2	*	*	*	*	*	*	*
2.3	Application	Lite	Speed Technologies Litespeed Web Server	1.3_rc3	*	*	*	*	*	*	*
2.3	Application	Neoteris	Instant Virtual Extranet	3.0	*	*	*	*	*	*	*
2.3	Application	Neoteris	Instant Virtual Extranet	3.1	*	*	*	*	*	*	*
2.3	Application	Neoteris	Instant Virtual Extranet	3.2	*	*	*	*	*	*	*
2.3	Application	Neoteris	Instant Virtual Extranet	3.3	*	*	*	*	*	*	*
2.3	Application	Neoteris	Instant Virtual Extranet	3.3.1	*	*	*	*	*	*	*
2.3	Application	Novell	Edirectory	8.0	*	*	*	*	*	*	*
2.3	Application	Novell	Edirectory	8.5	*	*	*	*	*	*	*
2.3	Application	Novell	Edirectory	8.5.12a	*	*	*	*	*	*	*
2.3	Application	Novell	Edirectory	8.5.27	*	*	*	*	*	*	*
2.3	Application	Novell	Edirectory	8.6.2	*	*	*	*	*	*	*
2.3	Application	Novell	Edirectory	8.7	*	*	*	*	*	*	*
2.3	Application	Novell	Edirectory	8.7.1	*	*	*	*	*	*	*
2.3	Application	Novell	Edirectory	8.7.1	sp1	*	*	*	*	*	*
2.3	Application	Novell	Imanager	1.5	*	*	*	*	*	*	*
2.3	Application	Novell	Imanager	2.0	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.6c	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.6d	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.6e	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.6f	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.6g	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.6h	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.6i	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.6j	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.6k	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.7	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.7	beta1	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.7	beta2	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.7	beta3	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.7a	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.7b	*	*	*	*	*	*	*
2.3	Application	Openssl	Openssl	0.9.7c	*	*	*	*	*	*	*
2.3	Application	Redhat	Openssl	0.9.6-15	*	i386	*	*	*	*	*
2.3	Application	Redhat	Openssl	0.9.6b-3	*	i386	*	*	*	*	*
2.3	Application	Redhat	Openssl	0.9.7a-2	*	i386	*	*	*	*	*
2.3	Application	Redhat	Openssl	0.9.7a-2	*	i386_dev	*	*	*	*	*
2.3	Application	Redhat	Openssl	0.9.7a-2	*	i386_perl	*	*	*	*	*
2.3	Application	Rsa	Bsafe Ssl-j Sdk	3.0	*	*	*	*	*	*	*
2.3	Application	Rsa	Bsafe Ssl-j Sdk	3.0.1	*	*	*	*	*	*	*
2.3	Application	Rsa	Bsafe Ssl-j Sdk	3.1	*	*	*	*	*	*	*
2.3	Application	Sgi	Propack	2.3	*	*	*	*	*	*	*
2.3	Application	Sgi	Propack	2.4	*	*	*	*	*	*	*
2.3	Application	Sgi	Propack	3.0	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Servercluster	2.5	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Servercluster	2.5.2	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonebeat Fullcluster	1_2.0	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonebeat Fullcluster	1_3.0	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonebeat Fullcluster	2.0	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonebeat Fullcluster	2.5	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonebeat Fullcluster	3.0	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonebeat Securitycluster	2.0	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonebeat Securitycluster	2.5	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonebeat Webcluster	2.0	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonebeat Webcluster	2.5	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	1.5.17	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	1.5.18	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	1.6.2	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	1.6.3	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	1.7	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	1.7.1	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	1.7.2	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.0.1	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.0.4	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.0.5	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.0.6	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.0.7	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.0.8	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.0.9	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.1	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.2	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.2.1	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate	2.2.4	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate Vpn Client	1.7	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate Vpn Client	1.7.2	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate Vpn Client	2.0	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate Vpn Client	2.0.7	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate Vpn Client	2.0.8	*	*	*	*	*	*	*
2.3	Application	Stonesoft	Stonegate Vpn Client	2.0.9	*	*	*	*	*	*	*
2.3	Application	Tarantella	Tarantella Enterprise	3.20	*	*	*	*	*	*	*
2.3	Application	Tarantella	Tarantella Enterprise	3.30	*	*	*	*	*	*	*
2.3	Application	Tarantella	Tarantella Enterprise	3.40	*	*	*	*	*	*	*
2.3	Application	Vmware	Gsx Server	2.0	*	*	*	*	*	*	*
2.3	Application	Vmware	Gsx Server	2.0.1_build_2129	*	*	*	*	*	*	*
2.3	Application	Vmware	Gsx Server	2.5.1	*	*	*	*	*	*	*
2.3	Application	Vmware	Gsx Server	2.5.1_build_5336	*	*	*	*	*	*	*
2.3	Application	Vmware	Gsx Server	3.0_build_7592	*	*	*	*	*	*	*
2.3	Hardware	Avaya	S8300	r2.0.0	*	*	*	*	*	*	*
2.3	Hardware	Avaya	S8300	r2.0.1	*	*	*	*	*	*	*
2.3	Hardware	Avaya	S8500	r2.0.0	*	*	*	*	*	*	*
2.3	Hardware	Avaya	S8500	r2.0.1	*	*	*	*	*	*	*
2.3	Hardware	Avaya	S8700	r2.0.0	*	*	*	*	*	*	*
2.3	Hardware	Avaya	S8700	r2.0.1	*	*	*	*	*	*	*
2.3	Hardware	Bluecoat	Proxysg	*	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Call Manager	*	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Content Services Switch 11500	*	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Gss 4480 Global Site Selector	*	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Gss 4490 Global Site Selector	*	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Mds 9000	*	*	*	*	*	*	*	*
2.3	Hardware	Cisco	Secure Content Accelerator	10000	*	*	*	*	*	*	*
2.3	Hardware	Securecomputing	Sidewinder	5.2	*	*	*	*	*	*	*
2.3	Hardware	Securecomputing	Sidewinder	5.2.0.01	*	*	*	*	*	*	*
2.3	Hardware	Securecomputing	Sidewinder	5.2.0.02	*	*	*	*	*	*	*
2.3	Hardware	Securecomputing	Sidewinder	5.2.0.03	*	*	*	*	*	*	*
2.3	Hardware	Securecomputing	Sidewinder	5.2.0.04	*	*	*	*	*	*	*
2.3	Hardware	Securecomputing	Sidewinder	5.2.1	*	*	*	*	*	*	*
2.3	Hardware	Securecomputing	Sidewinder	5.2.1.02	*	*	*	*	*	*	*
2.3	Hardware	Sun	Crypto Accelerator 4000	1.0	*	*	*	*	*	*	*
2.3	OS	Bluecoat	Cacheos Ca Sa	4.1.10	*	*	*	*	*	*	*
2.3	OS	Bluecoat	Cacheos Ca Sa	4.1.12	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.0	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.0(1)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.0(2)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.0(3)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.0(4)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.0(4.101)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.1	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.1(1)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.1(2)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.1(3)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.1(4)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.1(5)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.2	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.2(1)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.2(2)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.2(3)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.2(3.100)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.3	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.3(1)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.3(2)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.3(3.102)	*	*	*	*	*	*	*
2.3	OS	Cisco	Pix Firewall Software	6.3(3.109)	*	*	*	*	*	*	*

Vulnerable Software List

Vendor	Product	Versions
Freebsd	Freebsd	4.8, 4.9, 5.1, 5.2, 5.2.1
Novell	Edirectory	8.0, 8.5, 8.5.12a, 8.5.27, 8.6.2, 8.7, 8.7.1
Novell	Imanager	1.5, 2.0
Openbsd	Openbsd	3.3, 3.4
Redhat	Enterprise Linux	3.0
Redhat	Enterprise Linux Desktop	3.0
Redhat	Linux	7.2, 7.3, 8.0
Redhat	Openssl	0.9.6-15, 0.9.6b-3, 0.9.7a-2
Rsa	Bsafe Ssl-j Sdk	3.0, 3.0.1, 3.1
Sgi	Propack	2.3, 2.4, 3.0
Hp	Aaa Server	*
Hp	Wbem	a.01.05.08, a.02.00.00, a.02.00.01
Hp	Apache-based Web Server	2.0.43.00, 2.0.43.04
Hp	Hp-ux	11.00, 11.11, 11.23, 8.05
Symantec	Clientless Vpn Gateway 4400	5.0
Lite	Speed Technologies Litespeed Web Server	1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.1, 1.2.1, 1.2.2, 1.2_rc1, 1.2_rc2, 1.3, 1.3.1, 1.3_rc1, 1.3_rc2, 1.3_rc3
Bluecoat	Proxysg	*
Bluecoat	Cacheos Ca Sa	4.1.10, 4.1.12
Stonesoft	Servercluster	2.5, 2.5.2
Stonesoft	Stonebeat Fullcluster	1_2.0, 1_3.0, 2.0, 2.5, 3.0
Stonesoft	Stonebeat Securitycluster	2.0, 2.5
Stonesoft	Stonebeat Webcluster	2.0, 2.5
Stonesoft	Stonegate	1.5.17, 1.5.18, 1.6.2, 1.6.3, 1.7, 1.7.1, 1.7.2, 2.0.1, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.1, 2.2, 2.2.1, 2.2.4
Stonesoft	Stonegate Vpn Client	1.7, 1.7.2, 2.0, 2.0.7, 2.0.8, 2.0.9
Sun	Crypto Accelerator 4000	1.0
Securecomputing	Sidewinder	5.2, 5.2.0.01, 5.2.0.02, 5.2.0.03, 5.2.0.04, 5.2.1, 5.2.1.02
Sco	Openserver	5.0.6, 5.0.7
Avaya	S8300	r2.0.0, r2.0.1
Avaya	Intuity Audix	*, 5.1.46, s3210, s3400
Avaya	S8500	r2.0.0, r2.0.1
Avaya	Vsu	10000_r2.0.1, 100_r2.0.1, 2000_r2.0.1, 5, 500, 5000_r2.0.1, 5x, 7500_r2.0.1
Avaya	S8700	r2.0.0, r2.0.1
Avaya	Converged Communications Server	2.0
Avaya	Sg200	4.31.29, 4.4
Avaya	Sg203	4.31.29, 4.4
Avaya	Sg208	*, 4.4
Avaya	Sg5	4.2, 4.3, 4.4
Apple	Mac Os X Server	10.3.3
Apple	Mac Os X	10.3.3
Tarantella	Tarantella Enterprise	3.20, 3.30, 3.40
Checkpoint	Firewall-1	*, 2.0, next_generation_fp0, next_generation_fp1, next_generation_fp2
Checkpoint	Provider-1	4.1
Checkpoint	Vpn-1	next_generation_fp0, next_generation_fp1, next_generation_fp2, vsx_ng_with_application_intelligence
Openssl	Openssl	0.9.6c, 0.9.6d, 0.9.6e, 0.9.6f, 0.9.6g, 0.9.6h, 0.9.6i, 0.9.6j, 0.9.6k, 0.9.7, 0.9.7a, 0.9.7b, 0.9.7c
Cisco	Access Registrar	*
Cisco	Css Secure Content Accelerator	1.0, 2.0
Cisco	Okena Stormwatch	3.2
Cisco	Call Manager	*
Cisco	Threat Response	*
Cisco	Firewall Services Module	*, 1.1.2, 1.1.3, 1.1_(3.005), 2.1_(0.208)
Cisco	Ios	12.1(11)e, 12.1(11b)e, 12.1(11b)e12, 12.1(11b)e14, 12.1(13)e9, 12.1(19)e1, 12.2(14)sy, 12.2(14)sy1, 12.2sy, 12.2za
Cisco	Webns	6.10, 6.10_b4, 7.10, 7.10_.0.06s, 7.1_0.1.02, 7.1_0.2.06, 7.2_0.0.03
Cisco	Content Services Switch 11500	*
Cisco	Gss 4480 Global Site Selector	*
Cisco	Css11000 Content Services Switch	*
Cisco	Gss 4490 Global Site Selector	*
Cisco	Application And Content Networking Software	*
Cisco	Mds 9000	*
Cisco	Secure Content Accelerator	10000
Cisco	Pix Firewall	6.2.2_.111
Cisco	Pix Firewall Software	6.0, 6.0(1), 6.0(2), 6.0(3), 6.0(4), 6.0(4.101), 6.1, 6.1(1), 6.1(2), 6.1(3), 6.1(4), 6.1(5), 6.2, 6.2(1), 6.2(2), 6.2(3), 6.2(3.100), 6.3, 6.3(1), 6.3(2), 6.3(3.102), 6.3(3.109)
Cisco	Ciscoworks Common Management Foundation	2.1
Cisco	Ciscoworks Common Services	2.2
4d	Webstar	4.0, 5.2, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.3, 5.3.1
Vmware	Gsx Server	2.0, 2.0.1_build_2129, 2.5.1, 2.5.1_build_5336, 3.0_build_7592
Neoteris	Instant Virtual Extranet	3.0, 3.1, 3.2, 3.3, 3.3.1

References

Name	Source	URL	Tags
FreeBSD-SA-04:05	ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc	FREEBSD
NetBSD-SA2004-005	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc	NETBSD
SCOSA-2004.10	ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt	SCO
CLA-2004:834	http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834	CONECTIVA
http://docs.info.apple.com/article.html?artnum=61798	http://docs.info.apple.com/article.html?artnum=61798	CONFIRM
FEDORA-2004-095	http://fedoranews.org/updates/FEDORA-2004-095.shtml	FEDORA
APPLE-SA-2005-08-17	http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html	APPLE
APPLE-SA-2005-08-15	http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html	APPLE
http://lists.apple.com/mhonarc/security-announce/msg00045.html	http://lists.apple.com/mhonarc/security-announce/msg00045.html	CONFIRM
20040317 New OpenSSL releases fix denial of service attacks [17 March 2004]	http://marc.info/?l=bugtraq&m=107953412903636&w=2	BUGTRAQ
SSRT4717	http://marc.info/?l=bugtraq&m=108403806509920&w=2	HP
11139	http://secunia.com/advisories/11139	SECUNIA
17381	http://secunia.com/advisories/17381	SECUNIA
17398	http://secunia.com/advisories/17398	SECUNIA
17401	http://secunia.com/advisories/17401	SECUNIA
18247	http://secunia.com/advisories/18247	SECUNIA
GLSA-200403-03	http://security.gentoo.org/glsa/glsa-200403-03.xml	GENTOO
57524	http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524	SUNALERT
http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm	http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm	CONFIRM
http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US	http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US	CONFIRM
O-101	http://www.ciac.org/ciac/bulletins/o-101.shtml	CIAC
20040317 Cisco OpenSSL Implementation Vulnerability	http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml	CISCO
DSA-465	http://www.debian.org/security/2004/dsa-465	DEBIAN
VU#288574	http://www.kb.cert.org/vuls/id/288574	CERT-VN	US Government Resource
ESA-20040317-003	http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html	ENGARDE
MDKSA-2004:023	http://www.mandriva.com/security/advisories?name=MDKSA-2004:023	MANDRAKE
SuSE-SA:2004:007	http://www.novell.com/linux/security/advisories/2004_07_openssl.html	SUSE
http://www.openssl.org/news/secadv_20040317.txt	http://www.openssl.org/news/secadv_20040317.txt	CONFIRM
FEDORA-2005-1042	http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html	FEDORA
RHSA-2004:120	http://www.redhat.com/support/errata/RHSA-2004-120.html	REDHAT
RHSA-2004:121	http://www.redhat.com/support/errata/RHSA-2004-121.html	REDHAT
RHSA-2004:139	http://www.redhat.com/support/errata/RHSA-2004-139.html	REDHAT
RHSA-2005:829	http://www.redhat.com/support/errata/RHSA-2005-829.html	REDHAT
RHSA-2005:830	http://www.redhat.com/support/errata/RHSA-2005-830.html	REDHAT
9899	http://www.securityfocus.com/bid/9899	BID	Vendor Advisory
SSA:2004-077	http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961	SLACKWARE
2004-0012	http://www.trustix.org/errata/2004/0012	TRUSTIX
http://www.uniras.gov.uk/vuls/2004/224012/index.htm	http://www.uniras.gov.uk/vuls/2004/224012/index.htm	MISC
TA04-078A	http://www.us-cert.gov/cas/techalerts/TA04-078A.html	CERT	Third Party Advisory US Government Resource
openssl-dochangecipherspec-dos(15505)	https://exchange.xforce.ibmcloud.com/vulnerabilities/15505	XF
oval:org.mitre.oval:def:2621	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621	OVAL
oval:org.mitre.oval:def:5770	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5770	OVAL
oval:org.mitre.oval:def:870	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A870	OVAL
oval:org.mitre.oval:def:975	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A975	OVAL
oval:org.mitre.oval:def:9779	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9779	OVAL