CVE-2004-0112

Related Files

Cisco Security Advisory 20040317-openssl

Posted Mar 17, 2004

Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory 20040317 - A new vulnerability in the OpenSSL implementation for SSL has been announced. An affected network device running an SSL server based on an affected OpenSSL implementation may be vulnerable to a Denial of Service (DoS) attack.

tags | advisory, denial of service

systems | cisco

advisories | CVE-2004-0079, CVE-2004-0112

SHA-256 | 42b7301b69fb615efdd79960fe4a0a79c2e23d757d2404a1777bb41cce77e433

Download | Favorite | View

secadv_20040317.txt

Posted Mar 17, 2004

Site openssl.org

OpenSSL Security Advisory - A Null-pointer assignment during an SSL handshake can result in a denial of service. Versions 0.9.6c to 0.9.6k and 0.9.7a to 0.9.7c are affected by this issue. Versions 0.9.7a, 0.9.7b, and 0.9.7c are affected by another vulnerability in the handling of Kerberos ciphersuites that can cause OpenSSL to crash. Patches are attached to the advisory.

tags | advisory, denial of service

advisories | CVE-2004-0079, CVE-2004-0112

SHA-256 | 74e5edb8b95d18badf28cf2d243789474aa52058185bcdddde38d9e1318f98b5

Download | Favorite | View