MidnightBSD

Advisories for lite

CVE-2004-0079 MEDIUM

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 3.9 3.6

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-476,CWE-476,

Products Affected

Vendor Product Version
openssl openssl 0.9.6h
checkpoint vpn-1 vsx_ng_with_application_intelligence
avaya s8500 r2.0.0
avaya vsu 10000_r2.0.1
lite speed_technologies_litespeed_web_server 1.2_rc1
lite speed_technologies_litespeed_web_server 1.3
stonesoft stonegate 2.2
bluecoat cacheos_ca_sa 4.1.12
openssl openssl 0.9.6f
sco openserver 5.0.7
stonesoft stonegate_vpn_client 1.7
avaya sg203 4.4
lite speed_technologies_litespeed_web_server 1.3_rc2
dell bsafe_ssl-j 3.1
stonesoft stonegate 2.0.8
cisco webns 7.10_.0.06s
bluecoat cacheos_ca_sa 4.1.10
stonesoft stonebeat_fullcluster 3.0
freebsd freebsd 5.2
neoteris instant_virtual_extranet 3.1
checkpoint firewall-1 next_generation_fp0
redhat openssl 0.9.6-15
hp apache-based_web_server 2.0.43.00
checkpoint vpn-1 next_generation_fp1
lite speed_technologies_litespeed_web_server 1.3_rc3
cisco gss_4490_global_site_selector *
avaya vsu 500
sco openserver 5.0.6
cisco pix_firewall_software 6.2(3.100)
stonesoft stonegate 2.0.4
tarantella tarantella_enterprise 3.30
openssl openssl 0.9.7b
lite speed_technologies_litespeed_web_server 1.1
checkpoint firewall-1 *
cisco firewall_services_module 1.1_(3.005)
novell edirectory 8.6.2
stonesoft stonebeat_securitycluster 2.5
hp wbem a.02.00.01
novell imanager 2.0
vmware gsx_server 2.0.1_build_2129
sgi propack 2.4
stonesoft stonebeat_fullcluster 1_2.0
stonesoft stonegate 2.2.1
securecomputing sidewinder 5.2.0.04
cisco pix_firewall_software 6.0(3)
openbsd openbsd 3.3
4d webstar 5.3.1
freebsd freebsd 4.9
4d webstar 5.2
openssl openssl 0.9.6j
avaya sg5 4.2
avaya s8700 r2.0.1
vmware gsx_server 3.0_build_7592
freebsd freebsd 5.2.1
redhat enterprise_linux_desktop 3.0
avaya s8700 r2.0.0
stonesoft stonebeat_webcluster 2.0
cisco ios 12.1(19)e1
novell edirectory 8.7
stonesoft stonebeat_fullcluster 1_3.0
stonesoft stonegate 2.0.5
avaya sg200 4.4
novell edirectory 8.0
cisco okena_stormwatch 3.2
checkpoint vpn-1 next_generation_fp0
stonesoft stonegate_vpn_client 2.0.9
hp wbem a.01.05.08
stonesoft stonegate_vpn_client 2.0.7
bluecoat proxysg *
cisco pix_firewall_software 6.2(1)
sun crypto_accelerator_4000 1.0
avaya intuity_audix s3400
cisco pix_firewall_software 6.1(1)
redhat linux 7.2
openssl openssl 0.9.7a
checkpoint firewall-1 next_generation_fp1
avaya vsu 7500_r2.0.1
cisco secure_content_accelerator 10000
avaya converged_communications_server 2.0
stonesoft stonegate_vpn_client 2.0.8
cisco content_services_switch_11500 *
redhat openssl 0.9.6b-3
redhat enterprise_linux 3.0
4d webstar 4.0
avaya vsu 2000_r2.0.1
novell edirectory 8.7.1
neoteris instant_virtual_extranet 3.3
stonesoft stonebeat_securitycluster 2.0
openssl openssl 0.9.6c
securecomputing sidewinder 5.2.0.02
symantec clientless_vpn_gateway_4400 5.0
lite speed_technologies_litespeed_web_server 1.3_rc1
apple mac_os_x_server 10.3.3
lite speed_technologies_litespeed_web_server 1.0.1
cisco pix_firewall_software 6.2(3)
avaya sg200 4.31.29
cisco ios 12.1(11b)e12
lite speed_technologies_litespeed_web_server 1.2.2
cisco mds_9000 *
novell edirectory 8.5.27
cisco pix_firewall_software 6.1(5)
stonesoft stonegate_vpn_client 1.7.2
hp hp-ux 11.23
cisco ciscoworks_common_management_foundation 2.1
dell bsafe_ssl-j 3.0.1
hp wbem a.02.00.00
cisco pix_firewall_software 6.0(4)
novell edirectory 8.5
hp hp-ux 8.05
4d webstar 5.2.3
cisco pix_firewall_software 6.1(2)
cisco pix_firewall_software 6.0
stonesoft stonegate 1.6.2
avaya s8500 r2.0.1
lite speed_technologies_litespeed_web_server 1.1.1
openssl openssl 0.9.7
cisco webns 6.10
stonesoft stonegate 1.6.3
cisco pix_firewall_software 6.3(2)
novell imanager 1.5
sgi propack 2.3
stonesoft stonegate 1.7.1
lite speed_technologies_litespeed_web_server 1.2.1
cisco css11000_content_services_switch *
openbsd openbsd 3.4
cisco ios 12.2(14)sy
checkpoint provider-1 4.1
openssl openssl 0.9.6g
avaya s8300 r2.0.0
stonesoft stonegate 1.5.18
cisco firewall_services_module *
stonesoft servercluster 2.5
stonesoft stonegate 2.0.6
checkpoint firewall-1 2.0
checkpoint vpn-1 next_generation_fp2
cisco css_secure_content_accelerator 1.0
avaya vsu 5000_r2.0.1
stonesoft stonebeat_fullcluster 2.5
cisco webns 7.1_0.2.06
hp hp-ux 11.11
4d webstar 5.2.2
avaya intuity_audix s3210
dell bsafe_ssl-j 3.0
cisco ios 12.1(11)e
avaya intuity_audix *
neoteris instant_virtual_extranet 3.0
avaya sg203 4.31.29
cisco css_secure_content_accelerator 2.0
cisco pix_firewall_software 6.0(2)
neoteris instant_virtual_extranet 3.2
openssl openssl 0.9.6d
sgi propack 3.0
hp aaa_server *
cisco pix_firewall_software 6.3(3.102)
cisco webns 7.2_0.0.03
cisco gss_4480_global_site_selector *
cisco pix_firewall_software 6.3
stonesoft stonegate 1.5.17
vmware gsx_server 2.5.1
securecomputing sidewinder 5.2.1
avaya s8300 r2.0.1
openssl openssl 0.9.7c
stonesoft stonegate 1.7.2
cisco ios 12.1(13)e9
securecomputing sidewinder 5.2.0.01
tarantella tarantella_enterprise 3.40
securecomputing sidewinder 5.2
lite speed_technologies_litespeed_web_server 1.2_rc2
neoteris instant_virtual_extranet 3.3.1
stonesoft stonegate 2.1
stonesoft stonegate_vpn_client 2.0
cisco firewall_services_module 1.1.3
avaya sg5 4.4
lite speed_technologies_litespeed_web_server 1.0.3
avaya sg208 *
cisco pix_firewall_software 6.2
cisco webns 6.10_b4
redhat openssl 0.9.7a-2
stonesoft stonebeat_webcluster 2.5
stonesoft stonegate 2.0.9
avaya sg5 4.3
cisco ios 12.2za
cisco pix_firewall_software 6.2(2)
securecomputing sidewinder 5.2.0.03
cisco pix_firewall 6.2.2_.111
cisco pix_firewall_software 6.3(1)
cisco pix_firewall_software 6.1
freebsd freebsd 5.1
cisco ciscoworks_common_services 2.2
cisco ios 12.1(11b)e14
cisco application_and_content_networking_software *
openssl openssl 0.9.6k
stonesoft servercluster 2.5.2
cisco pix_firewall_software 6.3(3.109)
stonesoft stonegate 2.2.4
securecomputing sidewinder 5.2.1.02
cisco webns 7.10
avaya intuity_audix 5.1.46
stonesoft stonegate 2.0.1
openssl openssl 0.9.6e
stonesoft stonebeat_fullcluster 2.0
cisco pix_firewall_software 6.0(1)
avaya vsu 100_r2.0.1
avaya sg208 4.4
cisco threat_response *
lite speed_technologies_litespeed_web_server 1.0.2
avaya vsu 5x
cisco firewall_services_module 1.1.2
cisco webns 7.1_0.1.02
vmware gsx_server 2.5.1_build_5336
cisco pix_firewall_software 6.1(4)
4d webstar 5.2.1
redhat linux 8.0
novell edirectory 8.5.12a
cisco ios 12.2sy
redhat linux 7.3
hp apache-based_web_server 2.0.43.04
avaya vsu 5
cisco pix_firewall_software 6.0(4.101)
checkpoint firewall-1 next_generation_fp2
cisco ios 12.1(11b)e
stonesoft stonegate 1.7
cisco ios 12.2(14)sy1
cisco pix_firewall_software 6.1(3)
4d webstar 5.2.4
lite speed_technologies_litespeed_web_server 1.3.1
hp hp-ux 11.00
tarantella tarantella_enterprise 3.20
vmware gsx_server 2.0
cisco firewall_services_module 2.1_(0.208)
freebsd freebsd 4.8
4d webstar 5.3
cisco call_manager *
apple mac_os_x 10.3.3
stonesoft stonegate 2.0.7
openssl openssl 0.9.6i
cisco access_registrar *
CVE-2004-0081 MEDIUM

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
openssl openssl 0.9.6h
checkpoint vpn-1 vsx_ng_with_application_intelligence
avaya s8500 r2.0.0
avaya vsu 10000_r2.0.1
lite speed_technologies_litespeed_web_server 1.2_rc1
lite speed_technologies_litespeed_web_server 1.3
stonesoft stonegate 2.2
bluecoat cacheos_ca_sa 4.1.12
openssl openssl 0.9.6f
sco openserver 5.0.7
stonesoft stonegate_vpn_client 1.7
avaya sg203 4.4
lite speed_technologies_litespeed_web_server 1.3_rc2
dell bsafe_ssl-j 3.1
stonesoft stonegate 2.0.8
cisco webns 7.10_.0.06s
bluecoat cacheos_ca_sa 4.1.10
stonesoft stonebeat_fullcluster 3.0
freebsd freebsd 5.2
neoteris instant_virtual_extranet 3.1
checkpoint firewall-1 next_generation_fp0
redhat openssl 0.9.6-15
hp apache-based_web_server 2.0.43.00
checkpoint vpn-1 next_generation_fp1
lite speed_technologies_litespeed_web_server 1.3_rc3
cisco gss_4490_global_site_selector *
avaya vsu 500
sco openserver 5.0.6
cisco pix_firewall_software 6.2(3.100)
stonesoft stonegate 2.0.4
tarantella tarantella_enterprise 3.30
openssl openssl 0.9.7b
lite speed_technologies_litespeed_web_server 1.1
checkpoint firewall-1 *
cisco firewall_services_module 1.1_(3.005)
novell edirectory 8.6.2
stonesoft stonebeat_securitycluster 2.5
hp wbem a.02.00.01
novell imanager 2.0
vmware gsx_server 2.0.1_build_2129
sgi propack 2.4
stonesoft stonebeat_fullcluster 1_2.0
stonesoft stonegate 2.2.1
securecomputing sidewinder 5.2.0.04
cisco pix_firewall_software 6.0(3)
openbsd openbsd 3.3
4d webstar 5.3.1
freebsd freebsd 4.9
4d webstar 5.2
openssl openssl 0.9.6j
avaya sg5 4.2
avaya s8700 r2.0.1
vmware gsx_server 3.0_build_7592
freebsd freebsd 5.2.1
redhat enterprise_linux_desktop 3.0
avaya s8700 r2.0.0
stonesoft stonebeat_webcluster 2.0
cisco ios 12.1(19)e1
novell edirectory 8.7
stonesoft stonebeat_fullcluster 1_3.0
stonesoft stonegate 2.0.5
avaya sg200 4.4
novell edirectory 8.0
cisco okena_stormwatch 3.2
checkpoint vpn-1 next_generation_fp0
stonesoft stonegate_vpn_client 2.0.9
hp wbem a.01.05.08
stonesoft stonegate_vpn_client 2.0.7
bluecoat proxysg *
cisco pix_firewall_software 6.2(1)
sun crypto_accelerator_4000 1.0
avaya intuity_audix s3400
cisco pix_firewall_software 6.1(1)
redhat linux 7.2
openssl openssl 0.9.7a
checkpoint firewall-1 next_generation_fp1
avaya vsu 7500_r2.0.1
cisco secure_content_accelerator 10000
avaya converged_communications_server 2.0
stonesoft stonegate_vpn_client 2.0.8
cisco content_services_switch_11500 *
redhat openssl 0.9.6b-3
redhat enterprise_linux 3.0
4d webstar 4.0
avaya vsu 2000_r2.0.1
novell edirectory 8.7.1
neoteris instant_virtual_extranet 3.3
stonesoft stonebeat_securitycluster 2.0
openssl openssl 0.9.6c
securecomputing sidewinder 5.2.0.02
symantec clientless_vpn_gateway_4400 5.0
lite speed_technologies_litespeed_web_server 1.3_rc1
apple mac_os_x_server 10.3.3
lite speed_technologies_litespeed_web_server 1.0.1
cisco pix_firewall_software 6.2(3)
avaya sg200 4.31.29
cisco ios 12.1(11b)e12
lite speed_technologies_litespeed_web_server 1.2.2
cisco mds_9000 *
novell edirectory 8.5.27
cisco pix_firewall_software 6.1(5)
stonesoft stonegate_vpn_client 1.7.2
hp hp-ux 11.23
cisco ciscoworks_common_management_foundation 2.1
dell bsafe_ssl-j 3.0.1
hp wbem a.02.00.00
cisco pix_firewall_software 6.0(4)
novell edirectory 8.5
hp hp-ux 8.05
4d webstar 5.2.3
cisco pix_firewall_software 6.1(2)
cisco pix_firewall_software 6.0
stonesoft stonegate 1.6.2
avaya s8500 r2.0.1
lite speed_technologies_litespeed_web_server 1.1.1
openssl openssl 0.9.7
cisco webns 6.10
stonesoft stonegate 1.6.3
cisco pix_firewall_software 6.3(2)
novell imanager 1.5
sgi propack 2.3
stonesoft stonegate 1.7.1
lite speed_technologies_litespeed_web_server 1.2.1
cisco css11000_content_services_switch *
openbsd openbsd 3.4
cisco ios 12.2(14)sy
checkpoint provider-1 4.1
openssl openssl 0.9.6g
avaya s8300 r2.0.0
stonesoft stonegate 1.5.18
cisco firewall_services_module *
stonesoft servercluster 2.5
stonesoft stonegate 2.0.6
checkpoint firewall-1 2.0
cisco css_secure_content_accelerator 1.0
avaya vsu 5000_r2.0.1
stonesoft stonebeat_fullcluster 2.5
cisco webns 7.1_0.2.06
hp hp-ux 11.11
4d webstar 5.2.2
avaya intuity_audix s3210
dell bsafe_ssl-j 3.0
cisco ios 12.1(11)e
avaya intuity_audix *
neoteris instant_virtual_extranet 3.0
avaya sg203 4.31.29
cisco css_secure_content_accelerator 2.0
cisco pix_firewall_software 6.0(2)
neoteris instant_virtual_extranet 3.2
openssl openssl 0.9.6d
sgi propack 3.0
hp aaa_server *
cisco pix_firewall_software 6.3(3.102)
cisco webns 7.2_0.0.03
cisco gss_4480_global_site_selector *
cisco pix_firewall_software 6.3
stonesoft stonegate 1.5.17
vmware gsx_server 2.5.1
securecomputing sidewinder 5.2.1
avaya s8300 r2.0.1
openssl openssl 0.9.7c
stonesoft stonegate 1.7.2
cisco ios 12.1(13)e9
securecomputing sidewinder 5.2.0.01
tarantella tarantella_enterprise 3.40
securecomputing sidewinder 5.2
lite speed_technologies_litespeed_web_server 1.2_rc2
neoteris instant_virtual_extranet 3.3.1
stonesoft stonegate 2.1
stonesoft stonegate_vpn_client 2.0
cisco firewall_services_module 1.1.3
avaya sg5 4.4
lite speed_technologies_litespeed_web_server 1.0.3
avaya sg208 *
cisco pix_firewall_software 6.2
cisco webns 6.10_b4
redhat openssl 0.9.7a-2
stonesoft stonebeat_webcluster 2.5
stonesoft stonegate 2.0.9
avaya sg5 4.3
cisco ios 12.2za
cisco pix_firewall_software 6.2(2)
securecomputing sidewinder 5.2.0.03
cisco pix_firewall 6.2.2_.111
cisco pix_firewall_software 6.3(1)
checkpoint vpn-1 next_generation
cisco pix_firewall_software 6.1
freebsd freebsd 5.1
cisco ciscoworks_common_services 2.2
cisco ios 12.1(11b)e14
cisco application_and_content_networking_software *
openssl openssl 0.9.6k
stonesoft servercluster 2.5.2
cisco pix_firewall_software 6.3(3.109)
stonesoft stonegate 2.2.4
securecomputing sidewinder 5.2.1.02
cisco webns 7.10
avaya intuity_audix 5.1.46
stonesoft stonegate 2.0.1
openssl openssl 0.9.6e
stonesoft stonebeat_fullcluster 2.0
cisco pix_firewall_software 6.0(1)
avaya vsu 100_r2.0.1
avaya sg208 4.4
cisco threat_response *
lite speed_technologies_litespeed_web_server 1.0.2
avaya vsu 5x
cisco firewall_services_module 1.1.2
cisco webns 7.1_0.1.02
vmware gsx_server 2.5.1_build_5336
cisco pix_firewall_software 6.1(4)
4d webstar 5.2.1
redhat linux 8.0
novell edirectory 8.5.12a
cisco ios 12.2sy
redhat linux 7.3
hp apache-based_web_server 2.0.43.04
avaya vsu 5
cisco pix_firewall_software 6.0(4.101)
checkpoint firewall-1 next_generation_fp2
cisco ios 12.1(11b)e
stonesoft stonegate 1.7
cisco ios 12.2(14)sy1
cisco pix_firewall_software 6.1(3)
4d webstar 5.2.4
lite speed_technologies_litespeed_web_server 1.3.1
hp hp-ux 11.00
tarantella tarantella_enterprise 3.20
vmware gsx_server 2.0
cisco firewall_services_module 2.1_(0.208)
freebsd freebsd 4.8
4d webstar 5.3
cisco call_manager *
apple mac_os_x 10.3.3
stonesoft stonegate 2.0.7
openssl openssl 0.9.6i
cisco access_registrar *