OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVSS v2.0 Score
5.0
/ 10.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
Information
- Published
- 23 nov. 2004
- Updated
- 16 avr. 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
cisco firewall services module
Versions : 1.1.2, 1.1.3, 1.1_\(3.005\), 2.1_\(0.208\)
hp aaa server
hp apache-based web server
Versions : 2.0.43.00, 2.0.43.04
symantec clientless vpn gateway 4400
Versions : 5.0
cisco ciscoworks common management foundation
Versions : 2.1
cisco ciscoworks common services
Versions : 2.2
avaya converged communications server
Versions : 2.0
avaya sg200
Versions : 4.4, 4.31.29
Weaknesses (CWE)
NVD-CWE-Other
References (50)
- http://www.kb.cert.org/vuls/id/465542Third Party AdvisoryUS Government Resource
- + 35 more references on NVD
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.