The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
2004-11-23T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Hardware | cisco | firewall_services_module | * | Yes |
| Hardware | cisco | firewall_services_module | 1.1.2 | Yes |
| Hardware | cisco | firewall_services_module | 1.1.3 | Yes |
| Hardware | cisco | firewall_services_module | 1.1_\(3.005\) | Yes |
| Hardware | cisco | firewall_services_module | 2.1_\(0.208\) | Yes |
| Hardware | hp | aaa_server | * | Yes |
| Hardware | hp | apache-based_web_server | 2.0.43.00 | Yes |
| Hardware | hp | apache-based_web_server | 2.0.43.04 | Yes |
| Hardware | symantec | clientless_vpn_gateway_4400 | 5.0 | Yes |
| Application | cisco | ciscoworks_common_management_foundation | 2.1 | Yes |
| Application | cisco | ciscoworks_common_services | 2.2 | Yes |
| Hardware | avaya | converged_communications_server | 2.0 | Yes |
| Hardware | avaya | sg200 | 4.4 | Yes |
| Hardware | avaya | sg200 | 4.31.29 | Yes |
| Hardware | avaya | sg203 | 4.4 | Yes |
| Hardware | avaya | sg203 | 4.31.29 | Yes |
| Hardware | avaya | sg208 | * | Yes |
| Hardware | avaya | sg208 | 4.4 | Yes |
| Hardware | avaya | sg5 | 4.2 | Yes |
| Hardware | avaya | sg5 | 4.3 | Yes |
| Hardware | avaya | sg5 | 4.4 | Yes |
| Operating System | apple | mac_os_x | 10.3.3 | Yes |
| Operating System | apple | mac_os_x_server | 10.3.3 | Yes |
| Operating System | freebsd | freebsd | 4.8 | Yes |
| Operating System | freebsd | freebsd | 4.8 | Yes |
| Operating System | freebsd | freebsd | 4.9 | Yes |
| Operating System | freebsd | freebsd | 5.1 | Yes |
| Operating System | freebsd | freebsd | 5.1 | Yes |
| Operating System | freebsd | freebsd | 5.1 | Yes |
| Operating System | freebsd | freebsd | 5.2 | Yes |
| Operating System | freebsd | freebsd | 5.2.1 | Yes |
| Operating System | hp | hp-ux | 8.05 | Yes |
| Operating System | hp | hp-ux | 11.00 | Yes |
| Operating System | hp | hp-ux | 11.11 | Yes |
| Operating System | hp | hp-ux | 11.23 | Yes |
| Operating System | openbsd | openbsd | 3.3 | Yes |
| Operating System | openbsd | openbsd | 3.4 | Yes |
| Operating System | redhat | enterprise_linux | 3.0 | Yes |
| Operating System | redhat | enterprise_linux | 3.0 | Yes |
| Operating System | redhat | enterprise_linux | 3.0 | Yes |
| Operating System | redhat | enterprise_linux_desktop | 3.0 | Yes |
| Operating System | redhat | linux | 7.2 | Yes |
| Operating System | redhat | linux | 7.3 | Yes |
| Operating System | redhat | linux | 8.0 | Yes |
| Operating System | sco | openserver | 5.0.6 | Yes |
| Operating System | sco | openserver | 5.0.7 | Yes |
| Operating System | cisco | ios | 12.1\(11\)e | Yes |
| Operating System | cisco | ios | 12.1\(11b\)e | Yes |
| Operating System | cisco | ios | 12.1\(11b\)e12 | Yes |
| Operating System | cisco | ios | 12.1\(11b\)e14 | Yes |
| Operating System | cisco | ios | 12.1\(13\)e9 | Yes |
| Operating System | cisco | ios | 12.1\(19\)e1 | Yes |
| Operating System | cisco | ios | 12.2\(14\)sy | Yes |
| Operating System | cisco | ios | 12.2\(14\)sy1 | Yes |
| Operating System | cisco | ios | 12.2sy | Yes |
| Operating System | cisco | ios | 12.2za | Yes |
| Application | 4d | webstar | 4.0 | Yes |
| Application | 4d | webstar | 5.2 | Yes |
| Application | 4d | webstar | 5.2.1 | Yes |
| Application | 4d | webstar | 5.2.2 | Yes |
| Application | 4d | webstar | 5.2.3 | Yes |
| Application | 4d | webstar | 5.2.4 | Yes |
| Application | 4d | webstar | 5.3 | Yes |
| Application | 4d | webstar | 5.3.1 | Yes |
| Application | avaya | intuity_audix | * | Yes |
| Application | avaya | intuity_audix | 5.1.46 | Yes |
| Application | avaya | intuity_audix | s3210 | Yes |
| Application | avaya | intuity_audix | s3400 | Yes |
| Application | avaya | vsu | 5 | Yes |
| Application | avaya | vsu | 5x | Yes |
| Application | avaya | vsu | 100_r2.0.1 | Yes |
| Application | avaya | vsu | 500 | Yes |
| Application | avaya | vsu | 2000_r2.0.1 | Yes |
| Application | avaya | vsu | 5000_r2.0.1 | Yes |
| Application | avaya | vsu | 7500_r2.0.1 | Yes |
| Application | avaya | vsu | 10000_r2.0.1 | Yes |
| Application | checkpoint | firewall-1 | * | Yes |
| Application | checkpoint | firewall-1 | 2.0 | Yes |
| Application | checkpoint | firewall-1 | next_generation_fp0 | Yes |
| Application | checkpoint | firewall-1 | next_generation_fp1 | Yes |
| Application | checkpoint | firewall-1 | next_generation_fp2 | Yes |
| Application | checkpoint | provider-1 | 4.1 | Yes |
| Application | checkpoint | provider-1 | 4.1 | Yes |
| Application | checkpoint | provider-1 | 4.1 | Yes |
| Application | checkpoint | provider-1 | 4.1 | Yes |
| Application | checkpoint | provider-1 | 4.1 | Yes |
| Application | checkpoint | vpn-1 | next_generation_fp0 | Yes |
| Application | checkpoint | vpn-1 | next_generation_fp1 | Yes |
| Application | checkpoint | vpn-1 | next_generation_fp2 | Yes |
| Application | checkpoint | vpn-1 | vsx_ng_with_application_intelligence | Yes |
| Application | cisco | access_registrar | * | Yes |
| Application | cisco | application_and_content_networking_software | * | Yes |
| Application | cisco | css_secure_content_accelerator | 1.0 | Yes |
| Application | cisco | css_secure_content_accelerator | 2.0 | Yes |
| Application | cisco | css11000_content_services_switch | * | Yes |
| Application | cisco | okena_stormwatch | 3.2 | Yes |
| Application | cisco | pix_firewall | 6.2.2_.111 | Yes |
| Application | cisco | threat_response | * | Yes |
| Application | cisco | webns | 6.10 | Yes |
| Application | cisco | webns | 6.10_b4 | Yes |
| Application | cisco | webns | 7.1_0.1.02 | Yes |
| Application | cisco | webns | 7.1_0.2.06 | Yes |
| Application | cisco | webns | 7.2_0.0.03 | Yes |
| Application | cisco | webns | 7.10 | Yes |
| Application | cisco | webns | 7.10_.0.06s | Yes |
| Application | dell | bsafe_ssl-j | 3.0 | Yes |
| Application | dell | bsafe_ssl-j | 3.0.1 | Yes |
| Application | dell | bsafe_ssl-j | 3.1 | Yes |
| Application | forcepoint | stonegate | 1.5.17 | Yes |
| Application | forcepoint | stonegate | 1.5.18 | Yes |
| Application | forcepoint | stonegate | 1.6.2 | Yes |
| Application | forcepoint | stonegate | 1.6.3 | Yes |
| Application | forcepoint | stonegate | 1.7 | Yes |
| Application | forcepoint | stonegate | 1.7.1 | Yes |
| Application | forcepoint | stonegate | 1.7.2 | Yes |
| Application | forcepoint | stonegate | 2.0.1 | Yes |
| Application | forcepoint | stonegate | 2.0.4 | Yes |
| Application | forcepoint | stonegate | 2.0.5 | Yes |
| Application | forcepoint | stonegate | 2.0.6 | Yes |
| Application | forcepoint | stonegate | 2.0.7 | Yes |
| Application | forcepoint | stonegate | 2.0.8 | Yes |
| Application | forcepoint | stonegate | 2.0.9 | Yes |
| Application | forcepoint | stonegate | 2.1 | Yes |
| Application | forcepoint | stonegate | 2.2 | Yes |
| Application | forcepoint | stonegate | 2.2.1 | Yes |
| Application | forcepoint | stonegate | 2.2.4 | Yes |
| Application | hp | wbem | a.01.05.08 | Yes |
| Application | hp | wbem | a.02.00.00 | Yes |
| Application | hp | wbem | a.02.00.01 | Yes |
| Application | litespeedtech | litespeed_web_server | 1.0.1 | Yes |
| Application | litespeedtech | litespeed_web_server | 1.0.2 | No |
| Application | litespeedtech | litespeed_web_server | 1.0.3 | No |
| Application | litespeedtech | litespeed_web_server | 1.1 | No |
| Application | litespeedtech | litespeed_web_server | 1.1.1 | No |
| Application | litespeedtech | litespeed_web_server | 1.2 | No |
| Application | litespeedtech | litespeed_web_server | 1.2 | No |
| Application | litespeedtech | litespeed_web_server | 1.2.1 | No |
| Application | litespeedtech | litespeed_web_server | 1.2.2 | No |
| Application | litespeedtech | litespeed_web_server | 1.3 | No |
| Application | litespeedtech | litespeed_web_server | 1.3 | No |
| Application | litespeedtech | litespeed_web_server | 1.3 | No |
| Application | litespeedtech | litespeed_web_server | 1.3 | No |
| Application | neoteris | instant_virtual_extranet | 3.0 | Yes |
| Application | neoteris | instant_virtual_extranet | 3.1 | Yes |
| Application | neoteris | instant_virtual_extranet | 3.2 | Yes |
| Application | neoteris | instant_virtual_extranet | 3.3 | Yes |
| Application | neoteris | instant_virtual_extranet | 3.3.1 | Yes |
| Application | novell | edirectory | 8.0 | Yes |
| Application | novell | edirectory | 8.5 | Yes |
| Application | novell | edirectory | 8.5.12a | Yes |
| Application | novell | edirectory | 8.5.27 | Yes |
| Application | novell | edirectory | 8.6.2 | Yes |
| Application | novell | edirectory | 8.7 | Yes |
| Application | novell | edirectory | 8.7.1 | Yes |
| Application | novell | edirectory | 8.7.1 | Yes |
| Application | novell | imanager | 1.5 | Yes |
| Application | novell | imanager | 2.0 | Yes |
| Application | openssl | openssl | 0.9.6c | Yes |
| Application | openssl | openssl | 0.9.6d | Yes |
| Application | openssl | openssl | 0.9.6e | Yes |
| Application | openssl | openssl | 0.9.6f | Yes |
| Application | openssl | openssl | 0.9.6g | Yes |
| Application | openssl | openssl | 0.9.6h | Yes |
| Application | openssl | openssl | 0.9.6i | Yes |
| Application | openssl | openssl | 0.9.6j | Yes |
| Application | openssl | openssl | 0.9.6k | Yes |
| Application | openssl | openssl | 0.9.7 | Yes |
| Application | openssl | openssl | 0.9.7 | Yes |
| Application | openssl | openssl | 0.9.7 | Yes |
| Application | openssl | openssl | 0.9.7 | Yes |
| Application | openssl | openssl | 0.9.7a | Yes |
| Application | openssl | openssl | 0.9.7b | Yes |
| Application | openssl | openssl | 0.9.7c | Yes |
| Application | redhat | openssl | 0.9.6-15 | Yes |
| Application | redhat | openssl | 0.9.6b-3 | Yes |
| Application | redhat | openssl | 0.9.7a-2 | Yes |
| Application | redhat | openssl | 0.9.7a-2 | Yes |
| Application | redhat | openssl | 0.9.7a-2 | Yes |
| Application | sgi | propack | 2.3 | Yes |
| Application | sgi | propack | 2.4 | Yes |
| Application | sgi | propack | 3.0 | Yes |
| Application | stonesoft | servercluster | 2.5 | Yes |
| Application | stonesoft | servercluster | 2.5.2 | Yes |
| Application | stonesoft | stonebeat_fullcluster | 1_2.0 | Yes |
| Application | stonesoft | stonebeat_fullcluster | 1_3.0 | Yes |
| Application | stonesoft | stonebeat_fullcluster | 2.0 | Yes |
| Application | stonesoft | stonebeat_fullcluster | 2.5 | Yes |
| Application | stonesoft | stonebeat_fullcluster | 3.0 | Yes |
| Application | stonesoft | stonebeat_securitycluster | 2.0 | Yes |
| Application | stonesoft | stonebeat_securitycluster | 2.5 | Yes |
| Application | stonesoft | stonebeat_webcluster | 2.0 | Yes |
| Application | stonesoft | stonebeat_webcluster | 2.5 | Yes |
| Application | tarantella | tarantella_enterprise | 3.20 | Yes |
| Application | tarantella | tarantella_enterprise | 3.30 | Yes |
| Application | tarantella | tarantella_enterprise | 3.40 | Yes |
| Application | vmware | gsx_server | 2.0 | Yes |
| Application | vmware | gsx_server | 2.0.1_build_2129 | Yes |
| Application | vmware | gsx_server | 2.5.1 | Yes |
| Application | vmware | gsx_server | 2.5.1_build_5336 | Yes |
| Application | vmware | gsx_server | 3.0_build_7592 | Yes |
| Hardware | avaya | s8300 | r2.0.0 | Yes |
| Hardware | avaya | s8300 | r2.0.1 | Yes |
| Hardware | avaya | s8500 | r2.0.0 | Yes |
| Hardware | avaya | s8500 | r2.0.1 | Yes |
| Hardware | avaya | s8700 | r2.0.0 | Yes |
| Hardware | avaya | s8700 | r2.0.1 | Yes |
| Hardware | bluecoat | proxysg | * | Yes |
| Hardware | cisco | call_manager | * | Yes |
| Hardware | cisco | content_services_switch_11500 | * | Yes |
| Hardware | cisco | gss_4480_global_site_selector | * | Yes |
| Hardware | cisco | gss_4490_global_site_selector | * | Yes |
| Hardware | cisco | mds_9000 | * | Yes |
| Hardware | cisco | secure_content_accelerator | 10000 | Yes |
| Hardware | securecomputing | sidewinder | 5.2 | Yes |
| Hardware | securecomputing | sidewinder | 5.2.0.01 | Yes |
| Hardware | securecomputing | sidewinder | 5.2.0.02 | Yes |
| Hardware | securecomputing | sidewinder | 5.2.0.03 | Yes |
| Hardware | securecomputing | sidewinder | 5.2.0.04 | Yes |
| Hardware | securecomputing | sidewinder | 5.2.1 | Yes |
| Hardware | securecomputing | sidewinder | 5.2.1.02 | Yes |
| Hardware | sun | crypto_accelerator_4000 | 1.0 | Yes |
| Operating System | bluecoat | cacheos_ca_sa | 4.1.10 | Yes |
| Operating System | bluecoat | cacheos_ca_sa | 4.1.12 | Yes |
| Operating System | cisco | pix_firewall_software | 6.0 | Yes |
| Operating System | cisco | pix_firewall_software | 6.0\(1\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.0\(2\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.0\(3\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.0\(4\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.0\(4.101\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.1 | Yes |
| Operating System | cisco | pix_firewall_software | 6.1\(1\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.1\(2\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.1\(3\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.1\(4\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.1\(5\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.2 | Yes |
| Operating System | cisco | pix_firewall_software | 6.2\(1\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.2\(2\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.2\(3\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.2\(3.100\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.3 | Yes |
| Operating System | cisco | pix_firewall_software | 6.3\(1\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.3\(2\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.3\(3.102\) | Yes |
| Operating System | cisco | pix_firewall_software | 6.3\(3.109\) | Yes |