{"id":"CVE-2004-0079","url":"https://www.cyber-defence.io/tools/cve/CVE-2004-0079","generatedAt":"2026-10-27T18:32:36.470Z","title":"The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.","description":"The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.","published":"2004-11-23T05:00:00.000Z","lastModified":"2026-06-16T22:04:53.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-476"],"affected":["cisco/firewall services module","hp/aaa server","hp/apache-based web server","symantec/clientless vpn gateway 4400","cisco/ciscoworks common management foundation","cisco/ciscoworks common services","avaya/converged communications server","avaya/sg200","avaya/sg203","avaya/sg208","avaya/sg5","apple/mac os x","apple/mac os x server","freebsd/freebsd","hp/hp-ux","openbsd/openbsd","redhat/enterprise linux","redhat/enterprise linux desktop","redhat/linux","sco/openserver","cisco/ios","4d/webstar","avaya/intuity audix","avaya/vsu","checkpoint/firewall-1","checkpoint/provider-1","checkpoint/vpn-1","cisco/access registrar","cisco/application and content networking software","cisco/css secure content accelerator","cisco/css11000 content services switch","cisco/okena stormwatch","cisco/pix firewall","cisco/threat response","cisco/webns","dell/bsafe ssl-j","hp/wbem","lite/speed technologies litespeed web server","neoteris/instant virtual extranet","novell/edirectory","novell/imanager","openssl/openssl","redhat/openssl","sgi/propack","stonesoft/servercluster","stonesoft/stonebeat fullcluster","stonesoft/stonebeat securitycluster","stonesoft/stonebeat webcluster","stonesoft/stonegate","stonesoft/stonegate vpn client","tarantella/tarantella enterprise","vmware/gsx server","avaya/s8300","avaya/s8500","avaya/s8700","bluecoat/proxysg","cisco/call manager","cisco/content services switch 11500","cisco/gss 4480 global site selector","cisco/gss 4490 global site selector"],"epss":{"score":0.09537,"percentile":0.95422,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (9.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11139","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17381","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17398","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17401","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18247","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-101.shtml","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-465","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/288574","tags":["Third Party Advisory","US Government Resource"],"source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:023","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_07_openssl.html","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.openssl.org/news/secadv_20040317.txt","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-139.html","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-829.html","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-830.html","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9899","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.trustix.org/errata/2004/0012","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","tags":["Broken Link","Third Party Advisory","US Government Resource"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15505","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5770","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A870","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A975","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9779","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11139","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17381","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17398","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17401","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2004-0079","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}