Back
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service…
High7.5EPSS 9.5%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Timeline
ID reserved
By mitre
- 59 days later
· 59 days later
Published
- 21 years later
· 21 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 9.5% · top 4.5% of all CVEs (9 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
Affected products
n/a
- affected n/a
References (42)
- 9899 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- FEDORA-2005-1042 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- ESA-20040317-003 (opens in a new tab)vendor-advisoryx_refsource_ENGARDEx_transferred
- SSRT4717 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
- RHSA-2004:121 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- MDKSA-2004:023 (opens in a new tab)vendor-advisoryx_refsource_MANDRAKEx_transferred
- oval:org.mitre.oval:def:2621 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
- CLA-2004:834 (opens in a new tab)vendor-advisoryx_refsource_CONECTIVAx_transferred
- 17381 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- http://www.uniras.gov.uk/vuls/2004/224012/index.htm (opens in a new tab)x_refsource_MISCx_transferred
- FEDORA-2004-095 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- oval:org.mitre.oval:def:9779 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
- oval:org.mitre.oval:def:975 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
- 57524 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
- SuSE-SA:2004:007 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- http://lists.apple.com/mhonarc/security-announce/msg00045.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://www.openssl.org/news/secadv_20040317.txt (opens in a new tab)x_refsource_CONFIRMx_transferred
- O-101 (opens in a new tab)third-party-advisorygovernment-resourcex_refsource_CIACx_transferred
- TA04-078A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
- 17401 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- RHSA-2005:829 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
- oval:org.mitre.oval:def:870 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
- RHSA-2005:830 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- GLSA-200403-03 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
- 11139 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- RHSA-2004:120 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- 20040317 New OpenSSL releases fix denial of service attacks [17 March 2004] (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US (opens in a new tab)x_refsource_CONFIRMx_transferred
- APPLE-SA-2005-08-15 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
- 17398 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- SSA:2004-077 (opens in a new tab)vendor-advisoryx_refsource_SLACKWAREx_transferred
- RHSA-2004:139 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- openssl-dochangecipherspec-dos(15505) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 2004-0012 (opens in a new tab)vendor-advisoryx_refsource_TRUSTIXx_transferred
- 20040317 Cisco OpenSSL Implementation Vulnerability (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
- http://docs.info.apple.com/article.html?artnum=61798 (opens in a new tab)x_refsource_CONFIRMx_transferred
- VU#288574 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
- DSA-465 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- APPLE-SA-2005-08-17 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
- 18247 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- oval:org.mitre.oval:def:5770 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2004-0079 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2004-0079)Record last updated .