MidnightBSD

Advisories for lite

CVE-2004-0079 MEDIUM

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 3.9 3.6

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-476,CWE-476,

Products Affected

Vendor Product Version
stonesoft stonegate_vpn_client 1.7.2
bluecoat cacheos_ca_sa 4.1.12
freebsd freebsd 5.2.1
cisco pix_firewall_software 6.3(3.102)
lite speed_technologies_litespeed_web_server 1.1
stonesoft stonegate 2.1
avaya vsu 500
stonesoft stonebeat_fullcluster 2.0
hp aaa_server *
avaya sg5 4.4
novell edirectory 8.7.1
freebsd freebsd 5.1
stonesoft stonegate_vpn_client 1.7
cisco pix_firewall_software 6.1(4)
4d webstar 4.0
openssl openssl 0.9.6d
avaya sg200 4.4
avaya sg200 4.31.29
4d webstar 5.2.1
hp apache-based_web_server 2.0.43.04
cisco pix_firewall_software 6.1(1)
securecomputing sidewinder 5.2.0.04
cisco pix_firewall_software 6.3(1)
checkpoint firewall-1 *
cisco ciscoworks_common_management_foundation 2.1
stonesoft stonegate 2.0.5
redhat openssl 0.9.6b-3
openssl openssl 0.9.6c
redhat linux 7.3
vmware gsx_server 2.5.1
cisco pix_firewall_software 6.0(1)
avaya vsu 5000_r2.0.1
lite speed_technologies_litespeed_web_server 1.3_rc2
securecomputing sidewinder 5.2.0.02
stonesoft stonegate 2.2
checkpoint vpn-1 next_generation_fp0
cisco ios 12.2sy
checkpoint vpn-1 next_generation_fp2
novell edirectory 8.7
lite speed_technologies_litespeed_web_server 1.2.1
openssl openssl 0.9.6e
stonesoft stonegate 1.7.2
dell bsafe_ssl-j 3.0
redhat enterprise_linux_desktop 3.0
lite speed_technologies_litespeed_web_server 1.0.2
avaya sg5 4.3
sgi propack 2.4
stonesoft stonegate_vpn_client 2.0.7
bluecoat cacheos_ca_sa 4.1.10
vmware gsx_server 2.0
avaya sg208 4.4
lite speed_technologies_litespeed_web_server 1.1.1
cisco pix_firewall_software 6.0
neoteris instant_virtual_extranet 3.3.1
cisco gss_4490_global_site_selector *
redhat enterprise_linux 3.0
redhat openssl 0.9.6-15
cisco pix_firewall_software 6.2(3)
openssl openssl 0.9.6i
openssl openssl 0.9.6k
securecomputing sidewinder 5.2.0.03
avaya intuity_audix s3210
4d webstar 5.2.2
avaya vsu 7500_r2.0.1
cisco css_secure_content_accelerator 1.0
novell imanager 2.0
cisco webns 7.2_0.0.03
stonesoft stonegate_vpn_client 2.0.8
redhat linux 8.0
cisco mds_9000 *
avaya vsu 5x
redhat openssl 0.9.7a-2
symantec clientless_vpn_gateway_4400 5.0
hp wbem a.02.00.00
sgi propack 2.3
dell bsafe_ssl-j 3.0.1
avaya vsu 2000_r2.0.1
stonesoft stonegate 2.0.6
stonesoft stonebeat_webcluster 2.5
avaya s8500 r2.0.1
cisco ios 12.1(11)e
cisco webns 7.10_.0.06s
stonesoft stonegate 2.2.1
openssl openssl 0.9.7a
avaya intuity_audix s3400
cisco pix_firewall_software 6.2
cisco webns 6.10_b4
stonesoft stonegate 2.0.9
tarantella tarantella_enterprise 3.30
stonesoft stonebeat_webcluster 2.0
stonesoft stonebeat_fullcluster 1_3.0
avaya intuity_audix *
cisco firewall_services_module 1.1.2
cisco pix_firewall_software 6.3(3.109)
cisco secure_content_accelerator 10000
cisco ios 12.1(11b)e
cisco firewall_services_module *
hp apache-based_web_server 2.0.43.00
novell edirectory 8.6.2
avaya s8700 r2.0.1
lite speed_technologies_litespeed_web_server 1.3_rc1
openbsd openbsd 3.3
hp hp-ux 8.05
checkpoint provider-1 4.1
cisco call_manager *
openssl openssl 0.9.6h
freebsd freebsd 5.2
freebsd freebsd 4.8
avaya converged_communications_server 2.0
cisco ios 12.1(11b)e12
cisco ios 12.2za
4d webstar 5.2.3
cisco ios 12.2(14)sy1
tarantella tarantella_enterprise 3.20
cisco firewall_services_module 2.1_(0.208)
cisco pix_firewall_software 6.1(3)
cisco pix_firewall_software 6.2(3.100)
apple mac_os_x 10.3.3
stonesoft stonegate 1.6.3
lite speed_technologies_litespeed_web_server 1.3.1
cisco pix_firewall_software 6.0(4.101)
cisco pix_firewall_software 6.3
stonesoft stonegate 1.5.17
stonesoft stonebeat_fullcluster 1_2.0
cisco okena_stormwatch 3.2
cisco threat_response *
vmware gsx_server 2.5.1_build_5336
avaya vsu 5
cisco ios 12.1(13)e9
stonesoft stonebeat_fullcluster 2.5
avaya s8700 r2.0.0
neoteris instant_virtual_extranet 3.3
stonesoft stonegate_vpn_client 2.0.9
stonesoft stonebeat_securitycluster 2.0
avaya s8300 r2.0.1
cisco pix_firewall_software 6.0(2)
cisco content_services_switch_11500 *
lite speed_technologies_litespeed_web_server 1.3_rc3
cisco pix_firewall_software 6.0(3)
openssl openssl 0.9.7c
stonesoft stonegate 1.7
openssl openssl 0.9.6g
neoteris instant_virtual_extranet 3.1
avaya sg208 *
lite speed_technologies_litespeed_web_server 1.0.3
cisco access_registrar *
cisco ios 12.1(11b)e14
4d webstar 5.2.4
cisco css_secure_content_accelerator 2.0
avaya sg203 4.31.29
4d webstar 5.2
cisco application_and_content_networking_software *
avaya intuity_audix 5.1.46
cisco webns 7.1_0.1.02
checkpoint firewall-1 next_generation_fp1
openssl openssl 0.9.6f
checkpoint vpn-1 vsx_ng_with_application_intelligence
cisco gss_4480_global_site_selector *
securecomputing sidewinder 5.2.1
openbsd openbsd 3.4
avaya sg5 4.2
openssl openssl 0.9.7b
cisco pix_firewall_software 6.1(2)
cisco webns 6.10
sco openserver 5.0.6
novell edirectory 8.5.27
novell imanager 1.5
hp hp-ux 11.23
stonesoft stonegate_vpn_client 2.0
tarantella tarantella_enterprise 3.40
vmware gsx_server 3.0_build_7592
novell edirectory 8.0
novell edirectory 8.5.12a
bluecoat proxysg *
hp hp-ux 11.11
cisco firewall_services_module 1.1_(3.005)
cisco pix_firewall 6.2.2_.111
stonesoft stonegate 1.5.18
dell bsafe_ssl-j 3.1
checkpoint firewall-1 next_generation_fp0
avaya s8500 r2.0.0
cisco webns 7.1_0.2.06
lite speed_technologies_litespeed_web_server 1.2_rc2
hp wbem a.02.00.01
4d webstar 5.3.1
lite speed_technologies_litespeed_web_server 1.0.1
stonesoft stonegate 2.0.7
avaya s8300 r2.0.0
novell edirectory 8.5
cisco css11000_content_services_switch *
stonesoft stonebeat_fullcluster 3.0
cisco pix_firewall_software 6.1
checkpoint vpn-1 next_generation_fp1
sgi propack 3.0
cisco firewall_services_module 1.1.3
stonesoft stonegate 2.0.1
cisco ios 12.1(19)e1
lite speed_technologies_litespeed_web_server 1.2_rc1
4d webstar 5.3
hp wbem a.01.05.08
hp hp-ux 11.00
neoteris instant_virtual_extranet 3.2
stonesoft servercluster 2.5.2
sun crypto_accelerator_4000 1.0
cisco pix_firewall_software 6.2(2)
redhat linux 7.2
securecomputing sidewinder 5.2.0.01
stonesoft servercluster 2.5
stonesoft stonebeat_securitycluster 2.5
openssl openssl 0.9.7
securecomputing sidewinder 5.2.1.02
sco openserver 5.0.7
avaya vsu 100_r2.0.1
stonesoft stonegate 2.2.4
vmware gsx_server 2.0.1_build_2129
securecomputing sidewinder 5.2
avaya vsu 10000_r2.0.1
stonesoft stonegate 1.7.1
cisco pix_firewall_software 6.1(5)
lite speed_technologies_litespeed_web_server 1.3
avaya sg203 4.4
freebsd freebsd 4.9
apple mac_os_x_server 10.3.3
openssl openssl 0.9.6j
stonesoft stonegate 2.0.4
cisco pix_firewall_software 6.3(2)
checkpoint firewall-1 next_generation_fp2
checkpoint firewall-1 2.0
cisco pix_firewall_software 6.2(1)
neoteris instant_virtual_extranet 3.0
cisco pix_firewall_software 6.0(4)
lite speed_technologies_litespeed_web_server 1.2.2
stonesoft stonegate 2.0.8
stonesoft stonegate 1.6.2
cisco webns 7.10
cisco ios 12.2(14)sy
cisco ciscoworks_common_services 2.2
CVE-2004-0081 MEDIUM

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
stonesoft stonegate_vpn_client 1.7.2
bluecoat cacheos_ca_sa 4.1.12
freebsd freebsd 5.2.1
cisco pix_firewall_software 6.3(3.102)
lite speed_technologies_litespeed_web_server 1.1
stonesoft stonegate 2.1
avaya vsu 500
stonesoft stonebeat_fullcluster 2.0
hp aaa_server *
avaya sg5 4.4
novell edirectory 8.7.1
freebsd freebsd 5.1
stonesoft stonegate_vpn_client 1.7
cisco pix_firewall_software 6.1(4)
4d webstar 4.0
openssl openssl 0.9.6d
avaya sg200 4.4
avaya sg200 4.31.29
4d webstar 5.2.1
hp apache-based_web_server 2.0.43.04
cisco pix_firewall_software 6.1(1)
securecomputing sidewinder 5.2.0.04
cisco pix_firewall_software 6.3(1)
checkpoint firewall-1 *
cisco ciscoworks_common_management_foundation 2.1
stonesoft stonegate 2.0.5
redhat openssl 0.9.6b-3
openssl openssl 0.9.6c
redhat linux 7.3
vmware gsx_server 2.5.1
cisco pix_firewall_software 6.0(1)
avaya vsu 5000_r2.0.1
lite speed_technologies_litespeed_web_server 1.3_rc2
securecomputing sidewinder 5.2.0.02
stonesoft stonegate 2.2
checkpoint vpn-1 next_generation_fp0
cisco ios 12.2sy
novell edirectory 8.7
lite speed_technologies_litespeed_web_server 1.2.1
openssl openssl 0.9.6e
stonesoft stonegate 1.7.2
dell bsafe_ssl-j 3.0
redhat enterprise_linux_desktop 3.0
lite speed_technologies_litespeed_web_server 1.0.2
avaya sg5 4.3
sgi propack 2.4
stonesoft stonegate_vpn_client 2.0.7
bluecoat cacheos_ca_sa 4.1.10
vmware gsx_server 2.0
avaya sg208 4.4
lite speed_technologies_litespeed_web_server 1.1.1
cisco pix_firewall_software 6.0
neoteris instant_virtual_extranet 3.3.1
cisco gss_4490_global_site_selector *
redhat enterprise_linux 3.0
redhat openssl 0.9.6-15
cisco pix_firewall_software 6.2(3)
openssl openssl 0.9.6i
openssl openssl 0.9.6k
securecomputing sidewinder 5.2.0.03
avaya intuity_audix s3210
4d webstar 5.2.2
avaya vsu 7500_r2.0.1
cisco css_secure_content_accelerator 1.0
novell imanager 2.0
cisco webns 7.2_0.0.03
stonesoft stonegate_vpn_client 2.0.8
redhat linux 8.0
cisco mds_9000 *
avaya vsu 5x
redhat openssl 0.9.7a-2
symantec clientless_vpn_gateway_4400 5.0
hp wbem a.02.00.00
sgi propack 2.3
dell bsafe_ssl-j 3.0.1
avaya vsu 2000_r2.0.1
stonesoft stonegate 2.0.6
stonesoft stonebeat_webcluster 2.5
avaya s8500 r2.0.1
cisco ios 12.1(11)e
cisco webns 7.10_.0.06s
stonesoft stonegate 2.2.1
openssl openssl 0.9.7a
avaya intuity_audix s3400
cisco pix_firewall_software 6.2
cisco webns 6.10_b4
stonesoft stonegate 2.0.9
tarantella tarantella_enterprise 3.30
stonesoft stonebeat_webcluster 2.0
stonesoft stonebeat_fullcluster 1_3.0
avaya intuity_audix *
cisco firewall_services_module 1.1.2
cisco pix_firewall_software 6.3(3.109)
cisco secure_content_accelerator 10000
cisco ios 12.1(11b)e
cisco firewall_services_module *
hp apache-based_web_server 2.0.43.00
novell edirectory 8.6.2
avaya s8700 r2.0.1
lite speed_technologies_litespeed_web_server 1.3_rc1
openbsd openbsd 3.3
hp hp-ux 8.05
checkpoint provider-1 4.1
cisco call_manager *
openssl openssl 0.9.6h
freebsd freebsd 5.2
freebsd freebsd 4.8
avaya converged_communications_server 2.0
cisco ios 12.1(11b)e12
cisco ios 12.2za
4d webstar 5.2.3
cisco ios 12.2(14)sy1
tarantella tarantella_enterprise 3.20
cisco firewall_services_module 2.1_(0.208)
cisco pix_firewall_software 6.1(3)
cisco pix_firewall_software 6.2(3.100)
apple mac_os_x 10.3.3
stonesoft stonegate 1.6.3
lite speed_technologies_litespeed_web_server 1.3.1
cisco pix_firewall_software 6.0(4.101)
cisco pix_firewall_software 6.3
stonesoft stonegate 1.5.17
stonesoft stonebeat_fullcluster 1_2.0
cisco okena_stormwatch 3.2
cisco threat_response *
vmware gsx_server 2.5.1_build_5336
avaya vsu 5
cisco ios 12.1(13)e9
stonesoft stonebeat_fullcluster 2.5
avaya s8700 r2.0.0
neoteris instant_virtual_extranet 3.3
stonesoft stonegate_vpn_client 2.0.9
stonesoft stonebeat_securitycluster 2.0
avaya s8300 r2.0.1
cisco pix_firewall_software 6.0(2)
cisco content_services_switch_11500 *
lite speed_technologies_litespeed_web_server 1.3_rc3
cisco pix_firewall_software 6.0(3)
openssl openssl 0.9.7c
stonesoft stonegate 1.7
openssl openssl 0.9.6g
neoteris instant_virtual_extranet 3.1
avaya sg208 *
lite speed_technologies_litespeed_web_server 1.0.3
cisco access_registrar *
cisco ios 12.1(11b)e14
4d webstar 5.2.4
cisco css_secure_content_accelerator 2.0
avaya sg203 4.31.29
4d webstar 5.2
cisco application_and_content_networking_software *
avaya intuity_audix 5.1.46
cisco webns 7.1_0.1.02
checkpoint firewall-1 next_generation_fp1
checkpoint vpn-1 next_generation
openssl openssl 0.9.6f
checkpoint vpn-1 vsx_ng_with_application_intelligence
cisco gss_4480_global_site_selector *
securecomputing sidewinder 5.2.1
openbsd openbsd 3.4
avaya sg5 4.2
openssl openssl 0.9.7b
cisco pix_firewall_software 6.1(2)
cisco webns 6.10
sco openserver 5.0.6
novell edirectory 8.5.27
novell imanager 1.5
hp hp-ux 11.23
stonesoft stonegate_vpn_client 2.0
tarantella tarantella_enterprise 3.40
vmware gsx_server 3.0_build_7592
novell edirectory 8.0
novell edirectory 8.5.12a
bluecoat proxysg *
hp hp-ux 11.11
cisco firewall_services_module 1.1_(3.005)
cisco pix_firewall 6.2.2_.111
stonesoft stonegate 1.5.18
dell bsafe_ssl-j 3.1
checkpoint firewall-1 next_generation_fp0
avaya s8500 r2.0.0
cisco webns 7.1_0.2.06
lite speed_technologies_litespeed_web_server 1.2_rc2
hp wbem a.02.00.01
4d webstar 5.3.1
lite speed_technologies_litespeed_web_server 1.0.1
stonesoft stonegate 2.0.7
avaya s8300 r2.0.0
novell edirectory 8.5
cisco css11000_content_services_switch *
stonesoft stonebeat_fullcluster 3.0
cisco pix_firewall_software 6.1
checkpoint vpn-1 next_generation_fp1
sgi propack 3.0
cisco firewall_services_module 1.1.3
stonesoft stonegate 2.0.1
cisco ios 12.1(19)e1
lite speed_technologies_litespeed_web_server 1.2_rc1
4d webstar 5.3
hp wbem a.01.05.08
hp hp-ux 11.00
neoteris instant_virtual_extranet 3.2
stonesoft servercluster 2.5.2
sun crypto_accelerator_4000 1.0
cisco pix_firewall_software 6.2(2)
redhat linux 7.2
securecomputing sidewinder 5.2.0.01
stonesoft servercluster 2.5
stonesoft stonebeat_securitycluster 2.5
openssl openssl 0.9.7
securecomputing sidewinder 5.2.1.02
sco openserver 5.0.7
avaya vsu 100_r2.0.1
stonesoft stonegate 2.2.4
vmware gsx_server 2.0.1_build_2129
securecomputing sidewinder 5.2
avaya vsu 10000_r2.0.1
stonesoft stonegate 1.7.1
cisco pix_firewall_software 6.1(5)
lite speed_technologies_litespeed_web_server 1.3
avaya sg203 4.4
freebsd freebsd 4.9
apple mac_os_x_server 10.3.3
openssl openssl 0.9.6j
stonesoft stonegate 2.0.4
cisco pix_firewall_software 6.3(2)
checkpoint firewall-1 next_generation_fp2
checkpoint firewall-1 2.0
cisco pix_firewall_software 6.2(1)
neoteris instant_virtual_extranet 3.0
cisco pix_firewall_software 6.0(4)
lite speed_technologies_litespeed_web_server 1.2.2
stonesoft stonegate 2.0.8
stonesoft stonegate 1.6.2
cisco webns 7.10
cisco ios 12.2(14)sy
cisco ciscoworks_common_services 2.2