CVE-2004-0081: Medium severity Cisco Firewall Services Module vulnerability

Published Mar 18, 2004
·
Updated

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

Affected Software

252 affected components
Cisco Firewall Services Module
Symantec Clientless VPN Gateway 4400=5.0
HP Apache-based Web Server=2.0.43.00
Cisco Firewall Services Module=1.1.3
Cisco Firewall Services Module=1.1.2
HP Aaa Server
Cisco Firewall Services Module=1.1_\(3.005\)
HP Apache-based Web Server=2.0.43.04
Cisco Firewall Services Module=2.1_\(0.208\)
Avaya Sg203=4.4
HP HP-UX=11.11
redhat Enterprise Linux Desktop=3.0
HP HP-UX=11.23
Cisco CiscoWorks Common Management Foundation=2.1
FreeBSD FreeBSD=5.1-releng
Avaya Sg208=4.4
redhat Enterprise Linux=3.0
Avaya Sg200=4.4
Avaya Sg5=4.4
redhat Linux=7.2
Cisco CiscoWorks Common Services=2.2
OpenBSD OpenBSD=3.3
Apple Mac OS X Server=10.3.3
FreeBSD FreeBSD=5.1-release
redhat Linux=8.0
redhat Linux=7.3
Avaya Converged Communications Server=2.0
SCO OpenServer=5.0.7
HP HP-UX=11.00
Avaya Sg5=4.2
Avaya Sg208
FreeBSD FreeBSD=5.1
FreeBSD FreeBSD=5.2
Avaya Sg200=4.31.29
FreeBSD FreeBSD=4.8
redhat Enterprise Linux=3.0
Avaya Sg203=4.31.29
HP HP-UX=8.05
Apple iOS and macOS=10.3.3
FreeBSD FreeBSD=5.2.1-release
FreeBSD FreeBSD=4.8-releng
SCO OpenServer=5.0.6
Avaya Sg5=4.3
FreeBSD FreeBSD=4.9
OpenBSD OpenBSD=3.4
redhat Enterprise Linux=3.0
Cisco IOS=12.1\(11\)e
Cisco IOS=12.1\(11b\)e
Cisco IOS=12.1\(11b\)e12
Cisco IOS=12.1\(11b\)e14
Cisco IOS=12.1\(13\)e9
Cisco IOS=12.1\(19\)e1
Cisco IOS=12.2\(14\)sy
Cisco IOS=12.2\(14\)sy1
Cisco IOS=12.2sy
Cisco IOS=12.2za
4d WebStar=4.0
4d WebStar=5.2
4d WebStar=5.2.1
4d WebStar=5.2.2
4d WebStar=5.2.3
4d WebStar=5.2.4
4d WebStar=5.3
4d WebStar=5.3.1
Avaya Intuity Audix
Avaya Intuity Audix=5.1.46
Avaya Intuity Audix=s3210
Avaya Intuity Audix=s3400
Avaya Vsu=5
Avaya Vsu=5x
Avaya Vsu=100_r2.0.1
Avaya Vsu=500
Avaya Vsu=2000_r2.0.1
Avaya Vsu=5000_r2.0.1
Avaya Vsu=7500_r2.0.1
Avaya Vsu=10000_r2.0.1
Checkpoint Firewall-1
Checkpoint Firewall-1=2.0
Checkpoint Firewall-1=next_generation_fp0
Checkpoint Firewall-1=next_generation_fp1
Checkpoint Firewall-1=next_generation_fp2
Checkpoint Provider-1=4.1
Checkpoint Provider-1=4.1-sp1
Checkpoint Provider-1=4.1-sp2
Checkpoint Provider-1=4.1-sp3
Checkpoint Provider-1=4.1-sp4
Checkpoint Vpn-1=next_generation
Checkpoint Vpn-1=next_generation_fp0
Checkpoint Vpn-1=next_generation_fp1
Checkpoint Vpn-1=vsx_ng_with_application_intelligence
Cisco Access Registrar
Cisco Application And Content Networking Software
Cisco Css Secure Content Accelerator=1.0
Cisco Css Secure Content Accelerator=2.0
Cisco Css11000 Content Services Switch
Cisco Okena Stormwatch=3.2
Cisco PIX firewall=6.2.2_.111
Cisco Threat Response
Cisco WebNS=6.10
Cisco WebNS=6.10_b4
Cisco WebNS=7.1_0.1.02
Cisco WebNS=7.1_0.2.06
Cisco WebNS=7.2_0.0.03
Cisco WebNS=7.10
Cisco WebNS=7.10_.0.06s
Dell BSAFE SSL-J=3.0
Dell BSAFE SSL-J=3.0.1
Dell BSAFE SSL-J=3.1
HP Wbem=a.01.05.08
HP Wbem=a.02.00.00
HP Wbem=a.02.00.01
Lite Speed Technologies Litespeed Web Server=1.0.1
Lite Speed Technologies Litespeed Web Server=1.0.2
Lite Speed Technologies Litespeed Web Server=1.0.3
Lite Speed Technologies Litespeed Web Server=1.1
Lite Speed Technologies Litespeed Web Server=1.1.1
Lite Speed Technologies Litespeed Web Server=1.2.1
Lite Speed Technologies Litespeed Web Server=1.2.2
Lite Speed Technologies Litespeed Web Server=1.2_rc1
Lite Speed Technologies Litespeed Web Server=1.2_rc2
Lite Speed Technologies Litespeed Web Server=1.3
Lite Speed Technologies Litespeed Web Server=1.3.1
Lite Speed Technologies Litespeed Web Server=1.3_rc1
Lite Speed Technologies Litespeed Web Server=1.3_rc2
Lite Speed Technologies Litespeed Web Server=1.3_rc3
Neoteris Instant Virtual Extranet=3.0
Neoteris Instant Virtual Extranet=3.1
Neoteris Instant Virtual Extranet=3.2
Neoteris Instant Virtual Extranet=3.3
Neoteris Instant Virtual Extranet=3.3.1
Novell eDirectory=8.0
Novell eDirectory=8.5
Novell eDirectory=8.5.12a
Novell eDirectory=8.5.27
Novell eDirectory=8.6.2
Novell eDirectory=8.7
Novell eDirectory=8.7.1
Novell eDirectory=8.7.1-sp1
Novell iManager=1.5
Novell iManager=2.0
OpenSSL OpenSSL=0.9.6c
OpenSSL OpenSSL=0.9.6d
OpenSSL OpenSSL=0.9.6e
OpenSSL OpenSSL=0.9.6f
OpenSSL OpenSSL=0.9.6g
OpenSSL OpenSSL=0.9.6h
OpenSSL OpenSSL=0.9.6i
OpenSSL OpenSSL=0.9.6j
OpenSSL OpenSSL=0.9.6k
OpenSSL OpenSSL=0.9.7
OpenSSL OpenSSL=0.9.7-beta1
OpenSSL OpenSSL=0.9.7-beta2
OpenSSL OpenSSL=0.9.7-beta3
OpenSSL OpenSSL=0.9.7a
OpenSSL OpenSSL=0.9.7b
OpenSSL OpenSSL=0.9.7c
redhat Openssl=0.9.6-15
redhat Openssl=0.9.6b-3
redhat Openssl=0.9.7a-2
redhat Openssl=0.9.7a-2
redhat Openssl=0.9.7a-2
SGI ProPack=2.3
SGI ProPack=2.4
SGI ProPack=3.0
Stonesoft Servercluster=2.5
Stonesoft Servercluster=2.5.2
Stonesoft Stonebeat Fullcluster=1_2.0
Stonesoft Stonebeat Fullcluster=1_3.0
Stonesoft Stonebeat Fullcluster=2.0
Stonesoft Stonebeat Fullcluster=2.5
Stonesoft Stonebeat Fullcluster=3.0
Stonesoft Stonebeat Securitycluster=2.0
Stonesoft Stonebeat Securitycluster=2.5
Stonesoft Stonebeat Webcluster=2.0
Stonesoft Stonebeat Webcluster=2.5
Stonesoft StoneGate=1.5.17
Stonesoft StoneGate=1.5.18
Stonesoft StoneGate=1.6.2
Stonesoft StoneGate=1.6.3
Stonesoft StoneGate=1.7
Stonesoft StoneGate=1.7.1
Stonesoft StoneGate=1.7.2
Stonesoft StoneGate=2.0.1
Stonesoft StoneGate=2.0.4
Stonesoft StoneGate=2.0.5
Stonesoft StoneGate=2.0.6
Stonesoft StoneGate=2.0.7
Stonesoft StoneGate=2.0.8
Stonesoft StoneGate=2.0.9
Stonesoft StoneGate=2.1
Stonesoft StoneGate=2.2
Stonesoft StoneGate=2.2.1
Stonesoft StoneGate=2.2.4
Stonesoft Stonegate Vpn Client=1.7
Stonesoft Stonegate Vpn Client=1.7.2
Stonesoft Stonegate Vpn Client=2.0
Stonesoft Stonegate Vpn Client=2.0.7
Stonesoft Stonegate Vpn Client=2.0.8
Stonesoft Stonegate Vpn Client=2.0.9
Tarantella Tarantella Enterprise=3.20
Tarantella Tarantella Enterprise=3.30
Tarantella Tarantella Enterprise=3.40
VMware GSX Server=2.0
VMware GSX Server=2.0.1_build_2129
VMware GSX Server=2.5.1
VMware GSX Server=2.5.1_build_5336
VMware GSX Server=3.0_build_7592
Avaya S8300=r2.0.0
Avaya S8300=r2.0.1
Avaya S8500=r2.0.0
Avaya S8500=r2.0.1
Avaya S8700=r2.0.0
Avaya S8700=r2.0.1
bluecoat ProxySG
Cisco Call Manager
Cisco Content Services Switch 11500
Cisco Gss 4480 Global Site Selector
Cisco Gss 4490 Global Site Selector
Cisco MDS 9000
Cisco Secure Content Accelerator=10000
Securecomputing Sidewinder=5.2
Securecomputing Sidewinder=5.2.0.01
Securecomputing Sidewinder=5.2.0.02
Securecomputing Sidewinder=5.2.0.03
Securecomputing Sidewinder=5.2.0.04
Securecomputing Sidewinder=5.2.1
Securecomputing Sidewinder=5.2.1.02
Sun Crypto Accelerator 4000=1.0
bluecoat Cacheos Ca Sa=4.1.10
bluecoat Cacheos Ca Sa=4.1.12
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.0\(4\)
Cisco Pix Firewall Software=6.0\(4.101\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(1\)
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=6.1\(3\)
Cisco Pix Firewall Software=6.1\(4\)
Cisco Pix Firewall Software=6.1\(5\)
Cisco Pix Firewall Software=6.2
Cisco Pix Firewall Software=6.2\(1\)
Cisco Pix Firewall Software=6.2\(2\)
Cisco Pix Firewall Software=6.2\(3\)
Cisco Pix Firewall Software=6.2\(3.100\)
Cisco Pix Firewall Software=6.3
Cisco Pix Firewall Software=6.3\(1\)
Cisco Pix Firewall Software=6.3\(2\)
Cisco Pix Firewall Software=6.3\(3.102\)
Cisco Pix Firewall Software=6.3\(3.109\)

Event History

Mar 18, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2004-0081?

CVE-2004-0081 has a severity rating that indicates it can lead to a denial of service due to an infinite loop.

2

How do I fix CVE-2004-0081?

To fix CVE-2004-0081, upgrade OpenSSL to version 0.9.6d or later.

3

What systems are affected by CVE-2004-0081?

CVE-2004-0081 affects multiple systems including various versions of OpenSSL and related software such as Cisco, Avaya, and Symantec products.

4

Can CVE-2004-0081 be exploited remotely?

Yes, CVE-2004-0081 can be exploited remotely by sending specially crafted packets to services using vulnerable versions of OpenSSL.

5

What impact does CVE-2004-0081 have on affected systems?

The impact of CVE-2004-0081 on affected systems is primarily denial of service, causing them to enter an infinite loop and become unresponsive.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203