NetSight
IP …
medium5.0

CVE-2004-0081

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demo…

Impact

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

Affected products

VendorProductAffected versions
CiscoFirewall Services Module
All versions
Versions 1.1.2, 1.1.3, 1.1_\(3.005\), 2.1_\(0.208\)
HpAaa Server
All versions
HpApache-Based Web Server
Versions 2.0.43.00, 2.0.43.04
SymantecClientless Vpn Gateway 4400
Version 5.0
CiscoCiscoworks Common Management Foundation
Version 2.1
CiscoCiscoworks Common Services
Version 2.2
AvayaConverged Communications Server
Version 2.0
AvayaSg200
Versions 4.4, 4.31.29
AvayaSg203
Versions 4.4, 4.31.29
AvayaSg208
All versions
Version 4.4
AvayaSg5
Versions 4.2, 4.3, 4.4
AppleMac Os X
Version 10.3.3

References