CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...
7.5 HighFix available
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
9.54%Up 2.0 points since Feb 4, 2022
What each source reports
NVD Score used
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
- Record
CVE-2004-0079- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
- Record
CVE-2004-0079- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
- Record
EUVD-2004-0079- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xcj5-xcx2-vvvvNo score
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
- Record
GHSA-xcj5-xcx2-vvvv- Updated
- 2026-11-02
OSV
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
- Record
CVE-2004-0079- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
- Record
DEBIAN-CVE-2004-0079- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
- openssl
- redhat openssl
- redhat enterprise linux
- redhat enterprise linux desktop
- redhat linux
- 4d webstar
- apple mac os x
- apple mac os x server
- avaya converged communications server
- avaya intuity audix
- avaya s8300
- avaya s8500
Show 54 moreShow less
- avaya s8700
- avaya sg200
- avaya sg203
- avaya sg208
- avaya sg5
- avaya vsu
- bluecoat cacheos ca sa
- bluecoat proxysg
- checkpoint firewall-1
- checkpoint provider-1
- checkpoint vpn-1
- cisco access registrar
- cisco application and content networking software
- cisco call manager
- cisco ciscoworks common management foundation
- cisco ciscoworks common services
- cisco content services switch 11500
- cisco css11000 content services switch
- cisco css secure content accelerator
- cisco firewall services module
- cisco gss 4480 global site selector
- cisco gss 4490 global site selector
- cisco ios
- cisco mds 9000
- cisco okena stormwatch
- cisco pix firewall
- cisco pix firewall software
- cisco secure content accelerator
- cisco threat response
- cisco webns
- dell bsafe ssl-j
- freebsd
- hp aaa server
- hp apache-based web server
- hp hp-ux
- hp wbem
- lite speed technologies litespeed web server
- neoteris instant virtual extranet
- novell edirectory
- novell imanager
- openbsd
- sco openserver
- securecomputing sidewinder
- sgi propack
- stonesoft servercluster
- stonesoft stonebeat fullcluster
- stonesoft stonebeat securitycluster
- stonesoft stonebeat webcluster
- stonesoft stonegate
- stonesoft stonegate vpn client
- sun crypto accelerator 4000
- symantec clientless vpn gateway 4400
- tarantella enterprise
- vmware gsx server
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 | before 0.9.7d-1 | 0.9.7d-1 |
opensslDebian:13 | before 0.9.7d-1 | 0.9.7d-1 |
opensslDebian:14 | before 0.9.7d-1 | 0.9.7d-1 |
opensslDebian:3.0 From an advisory covering 2 CVEs | before 0.9.6c-2.woody.6 | 0.9.6c-2.woody.6 |
openssl094Debian:3.0 From an advisory covering 2 CVEs | before 0.9.4-6.woody.4, plus listed versions 0.9.4-60.9.4-6.potato.30.9.4-6.woody.3 | 0.9.4-6.woody.4 |
openssl095Debian:3.0 From an advisory covering 2 CVEs | before 0.9.5a-6.woody.5, plus listed versions 0.9.5a-6.woody.3 | 0.9.5a-6.woody.5 |
opensslRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-perlRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
Show 20 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssl096bRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:0.9.6b-16 | 0:0.9.6b-16 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:0.9.6b-16 | 0:0.9.6b-16 |
opensslRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-perlRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl096bRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:0.9.6b-16 | 0:0.9.6b-16 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:0.9.6b-16 | 0:0.9.6b-16 |
opensslRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-perlRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl096bRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:0.9.6b-16 | 0:0.9.6b-16 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:0.9.6b-16 | 0:0.9.6b-16 |
opensslRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-perlRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl096bRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:0.9.6b-16 | 0:0.9.6b-16 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:0.9.6b-16 | 0:0.9.6b-16 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0079 is a high vulnerability (CVSS 7.5) in Openssl, published March 17, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.54%, the 95th percentile. Fixed in openssl 0.9.7d-1.
References
securityfocus.com/bid/9899
redhat.com/archives/fedora-announce-list/2005-October/msg00087.html
linuxsecurity.com/advisories/engarde_advisory-4135.html
marc.info?l=bugtraq&m=108403806509920&w=2
mandriva.com/security/advisories?name=MDKSA-2004:023
Show 56 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000834
secunia.com/advisories/17381
uniras.gov.uk/vuls/2004/224012/index.htm
fedoranews.org/updates/FEDORA-2004-095.shtml
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
novell.com/linux/security/advisories/2004_07_openssl.html
lists.apple.com/mhonarc/security-announce/msg00045.html
openssl.org/news/secadv_20040317.txt
ciac.org/ciac/bulletins/o-101.shtml
us-cert.gov/cas/techalerts/TA04-078A.html
support.avaya.com/elmodocs2/security/ASA-2005-239.htm
security.gentoo.org/glsa/glsa-200403-03.xml
support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US
slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961
exchange.xforce.ibmcloud.com/vulnerabilities/15505
trustix.org/errata/2004/0012
cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
docs.info.apple.com/article.html?artnum=61798
kb.cert.org/vuls/id/288574
debian.org/security/2004/dsa-465
nvd.nist.gov/vuln/detail/CVE-2004-0079
github.com/advisories/GHSA-xcj5-xcx2-vvvv
security-tracker.debian.org/tracker/CVE-2004-0079
access.redhat.com/errata/RHSA-2004:120
codenomicon.com/testtools/tls
niscc.gov.uk
bugzilla.redhat.com/show_bug.cgi?id=117770
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_120.json
cve.org/CVERecord?id=CVE-2004-0079