onyx --cves cve-2004-0112
CVE-2004-0112
- score
- <0.1
- cvss
- 5.0
- epss
- 10.4%
- published
- 2004-11-23
- kev added
- —
- first seen
OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c contain a denial of service caused by improper length checking of Kerberos tickets during SSL/TLS handshake, letting remote attackers cause crashes via crafted handshakes, exploit requires network access and crafted handshake.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 8
- http://marc.info/?l=bugtraq&m=108403806509920&w=2
- http://security.gentoo.org/glsa/glsa-200403-03.xml
- http://www.kb.cert.org/vuls/id/484726
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:023
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15508
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://marc.info/?l=bugtraq&m=107953412903636&w=2