CVE-2004-0081
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote...
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
Exploit likelihood
What each source reports
NVD Score used
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
- Record
CVE-2004-0081- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
- Record
CVE-2004-0081- Updated
- 2026-11-02
EUVDEUVD-2004-0081 No score
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
- Record
EUVD-2004-0081- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pcwf-qwvv-qjg3 No score
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote...
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
- Record
GHSA-pcwf-qwvv-qjg3- Updated
- 2026-11-02
OSV No score
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
- Record
CVE-2004-0081- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0081 No score
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
- Record
DEBIAN-CVE-2004-0081- Updated
- 2026-11-02
Affected products
- openssl
- redhat openssl
- redhat enterprise linux
- redhat enterprise linux desktop
- redhat linux
- 4d webstar
- apple mac os x
- apple mac os x server
- avaya converged communications server
- avaya intuity audix
- avaya s8300
- avaya s8500
Show 54 moreShow less
- avaya s8700
- avaya sg200
- avaya sg203
- avaya sg208
- avaya sg5
- avaya vsu
- bluecoat cacheos ca sa
- bluecoat proxysg
- checkpoint firewall-1
- checkpoint provider-1
- checkpoint vpn-1
- cisco access registrar
- cisco application and content networking software
- cisco call manager
- cisco ciscoworks common management foundation
- cisco ciscoworks common services
- cisco content services switch 11500
- cisco css11000 content services switch
- cisco css secure content accelerator
- cisco firewall services module
- cisco gss 4480 global site selector
- cisco gss 4490 global site selector
- cisco ios
- cisco mds 9000
- cisco okena stormwatch
- cisco pix firewall
- cisco pix firewall software
- cisco secure content accelerator
- cisco threat response
- cisco webns
- dell bsafe ssl-j
- freebsd
- hp aaa server
- hp apache-based web server
- hp hp-ux
- hp wbem
- lite speed technologies litespeed web server
- neoteris instant virtual extranet
- novell edirectory
- novell imanager
- openbsd
- sco openserver
- securecomputing sidewinder
- sgi propack
- stonesoft servercluster
- stonesoft stonebeat fullcluster
- stonesoft stonebeat securitycluster
- stonesoft stonebeat webcluster
- stonesoft stonegate
- stonesoft stonegate vpn client
- sun crypto accelerator 4000
- symantec clientless vpn gateway 4400
- tarantella enterprise
- vmware gsx server
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 |
before 0.9.6d-1 | 0.9.6d-1 |
opensslDebian:13 |
before 0.9.6d-1 | 0.9.6d-1 |
opensslDebian:14 |
before 0.9.6d-1 | 0.9.6d-1 |
opensslDebian:3.0 |
before 0.9.6c-2.woody.6 | 0.9.6c-2.woody.6 |
openssl094Debian:3.0 |
before 0.9.4-6.woody.4, plus listed versions 0.9.4-60.9.4-6.potato.30.9.4-6.woody.3 |
0.9.4-6.woody.4 |
openssl095Debian:3.0 |
before 0.9.5a-6.woody.5, plus listed versions 0.9.5a-6.woody.3 |
0.9.5a-6.woody.5 |
opensslRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-debuginfoRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-develRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-perlRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
Show 20 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssl096bRed Hat:enterprise_linux:3::as |
before 0:0.9.6b-16 | 0:0.9.6b-16 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::as |
before 0:0.9.6b-16 | 0:0.9.6b-16 |
opensslRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-develRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-perlRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl096bRed Hat:enterprise_linux:3::desktop |
before 0:0.9.6b-16 | 0:0.9.6b-16 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:0.9.6b-16 | 0:0.9.6b-16 |
opensslRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-debuginfoRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-develRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-perlRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl096bRed Hat:enterprise_linux:3::es |
before 0:0.9.6b-16 | 0:0.9.6b-16 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::es |
before 0:0.9.6b-16 | 0:0.9.6b-16 |
opensslRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-develRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl-perlRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.4 | 0:0.9.7a-33.4 |
openssl096bRed Hat:enterprise_linux:3::ws |
before 0:0.9.6b-16 | 0:0.9.6b-16 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:0.9.6b-16 | 0:0.9.6b-16 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0081 is a medium vulnerability (CVSS 5.0) in Openssl, published March 17, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.23%, the 94th percentile. Fixed in openssl 0.9.6d-1.
References
securityfocus.com/bid/9899
linuxsecurity.com/advisories/engarde_advisory-4135.html
marc.info?l=bugtraq&m=107955049331965&w=2
redhat.com/support/errata/RHSA-2004-121.html
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000834
exchange.xforce.ibmcloud.com/vulnerabilities/15509
Show 37 moreShow less
uniras.gov.uk/vuls/2004/224012/index.htm
fedoranews.org/updates/FEDORA-2004-095.shtml
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871
kb.cert.org/vuls/id/465542
us-cert.gov/cas/techalerts/TA04-078A.html
security.gentoo.org/glsa/glsa-200403-03.xml
secunia.com/advisories/11139
rhn.redhat.com/errata/RHSA-2004-119.html
trustix.org/errata/2004/0012
cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
debian.org/security/2004/dsa-465
nvd.nist.gov/vuln/detail/CVE-2004-0081
github.com/advisories/GHSA-pcwf-qwvv-qjg3
security-tracker.debian.org/tracker/CVE-2004-0081
access.redhat.com/errata/RHSA-2004:120
codenomicon.com/testtools/tls
niscc.gov.uk
bugzilla.redhat.com/show_bug.cgi?id=117770
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_120.json
cve.org/CVERecord?id=CVE-2004-0079