cisco firewall-services-module CVE-2004-0079 vulnerability in Cisco and Other Products
Published on November 23, 2004

product logo product logo product logo product logo product logo product logo product logo product logo product logo
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2004-0079 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
HIGH

Weakness Type

NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.


Products Associated with CVE-2004-0079

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2004-0079 are published in these products:

Cisco Firewall Services Module
 
Symantec Clientless Vpn Gateway 4400
 
HP Apache Based Web Server
 
HP Aaa Server
 
Ciscoworks Common Management Foundation
 
Ciscoworks Common Services
 
Avaya Sg208
 
Avaya Sg5
 
FreeBSD
 
Hp Ux
 
OpenBSD
 
Red Hat Linux
 
Sco Openserver
 
Avaya Sg203
 
Red Hat Enterprise Linux Desktop
 
Avaya Sg200
 
Red Hat Enterprise Linux (RHEL)
 
Avaya Converged Communications Server
 
Apple macOS
 

Exploit Probability

EPSS
2.28%
Percentile
84.47%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.