CVE-2004-0112: Medium severity Cisco Firewall Services Module vulnerability

Published Mar 18, 2004
·
Updated

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

Affected Software

445 affected components
Cisco Firewall Services Module
Symantec Clientless VPN Gateway 4400=5.0
HP Apache-based Web Server=2.0.43.00
Cisco Firewall Services Module=1.1.3
Cisco Firewall Services Module=1.1.2
HP Aaa Server
Cisco Firewall Services Module=1.1_\(3.005\)
HP Apache-based Web Server=2.0.43.04
Cisco Firewall Services Module=2.1_\(0.208\)
Avaya Sg203=4.4
HP HP-UX=11.11
redhat Enterprise Linux Desktop=3.0
HP HP-UX=11.23
Cisco CiscoWorks Common Management Foundation=2.1
FreeBSD FreeBSD=5.1-releng
Avaya Sg208=4.4
redhat Enterprise Linux=3.0
Avaya Sg200=4.4
Avaya Sg5=4.4
redhat Linux=7.2
Cisco CiscoWorks Common Services=2.2
OpenBSD OpenBSD=3.3
Apple Mac OS X Server=10.3.3
FreeBSD FreeBSD=5.1-release
redhat Linux=8.0
redhat Linux=7.3
Avaya Converged Communications Server=2.0
SCO OpenServer=5.0.7
HP HP-UX=11.00
Avaya Sg5=4.2
Avaya Sg208
FreeBSD FreeBSD=5.1
FreeBSD FreeBSD=5.2
Avaya Sg200=4.31.29
FreeBSD FreeBSD=4.8
redhat Enterprise Linux=3.0
Avaya Sg203=4.31.29
HP HP-UX=8.05
Apple iOS and macOS=10.3.3
FreeBSD FreeBSD=5.2.1-release
FreeBSD FreeBSD=4.8-releng
SCO OpenServer=5.0.6
Avaya Sg5=4.3
FreeBSD FreeBSD=4.9
OpenBSD OpenBSD=3.4
redhat Enterprise Linux=3.0
Cisco IOS=12.1\(11\)e
Cisco IOS=12.1\(11b\)e
Cisco IOS=12.1\(11b\)e12
Cisco IOS=12.1\(11b\)e14
Cisco IOS=12.1\(13\)e9
Cisco IOS=12.1\(19\)e1
Cisco IOS=12.2\(14\)sy
Cisco IOS=12.2\(14\)sy1
Cisco IOS=12.2sy
Cisco IOS=12.2za
4d WebStar=4.0
4d WebStar=5.2
4d WebStar=5.2.1
4d WebStar=5.2.2
4d WebStar=5.2.3
4d WebStar=5.2.4
4d WebStar=5.3
4d WebStar=5.3.1
Avaya Intuity Audix
Avaya Intuity Audix=5.1.46
Avaya Intuity Audix=s3210
Avaya Intuity Audix=s3400
Avaya Vsu=5
Avaya Vsu=5x
Avaya Vsu=100_r2.0.1
Avaya Vsu=500
Avaya Vsu=2000_r2.0.1
Avaya Vsu=5000_r2.0.1
Avaya Vsu=7500_r2.0.1
Avaya Vsu=10000_r2.0.1
Checkpoint Firewall-1
Checkpoint Firewall-1=2.0
Checkpoint Firewall-1=next_generation_fp0
Checkpoint Firewall-1=next_generation_fp1
Checkpoint Firewall-1=next_generation_fp2
Checkpoint Provider-1=4.1
Checkpoint Provider-1=4.1-sp1
Checkpoint Provider-1=4.1-sp2
Checkpoint Provider-1=4.1-sp3
Checkpoint Provider-1=4.1-sp4
Checkpoint Vpn-1=next_generation_fp0
Checkpoint Vpn-1=next_generation_fp1
Checkpoint Vpn-1=next_generation_fp2
Checkpoint Vpn-1=vsx_ng_with_application_intelligence
Cisco Access Registrar
Cisco Application And Content Networking Software
Cisco Css Secure Content Accelerator=1.0
Cisco Css Secure Content Accelerator=2.0
Cisco Css11000 Content Services Switch
Cisco Okena Stormwatch=3.2
Cisco PIX firewall=6.2.2_.111
Cisco Threat Response
Cisco WebNS=6.10
Cisco WebNS=6.10_b4
Cisco WebNS=7.1_0.1.02
Cisco WebNS=7.1_0.2.06
Cisco WebNS=7.2_0.0.03
Cisco WebNS=7.10
Cisco WebNS=7.10_.0.06s
Dell BSAFE SSL-J=3.0
Dell BSAFE SSL-J=3.0.1
Dell BSAFE SSL-J=3.1
HP Wbem=a.01.05.08
HP Wbem=a.02.00.00
HP Wbem=a.02.00.01
Lite Speed Technologies Litespeed Web Server=1.0.1
Lite Speed Technologies Litespeed Web Server=1.0.2
Lite Speed Technologies Litespeed Web Server=1.0.3
Lite Speed Technologies Litespeed Web Server=1.1
Lite Speed Technologies Litespeed Web Server=1.1.1
Lite Speed Technologies Litespeed Web Server=1.2.1
Lite Speed Technologies Litespeed Web Server=1.2.2
Lite Speed Technologies Litespeed Web Server=1.2_rc1
Lite Speed Technologies Litespeed Web Server=1.2_rc2
Lite Speed Technologies Litespeed Web Server=1.3
Lite Speed Technologies Litespeed Web Server=1.3.1
Lite Speed Technologies Litespeed Web Server=1.3_rc1
Lite Speed Technologies Litespeed Web Server=1.3_rc2
Lite Speed Technologies Litespeed Web Server=1.3_rc3
Neoteris Instant Virtual Extranet=3.0
Neoteris Instant Virtual Extranet=3.1
Neoteris Instant Virtual Extranet=3.2
Neoteris Instant Virtual Extranet=3.3
Neoteris Instant Virtual Extranet=3.3.1
Novell eDirectory=8.0
Novell eDirectory=8.5
Novell eDirectory=8.5.12a
Novell eDirectory=8.5.27
Novell eDirectory=8.6.2
Novell eDirectory=8.7
Novell eDirectory=8.7.1
Novell eDirectory=8.7.1-sp1
Novell iManager=1.5
Novell iManager=2.0
OpenSSL OpenSSL=0.9.6c
OpenSSL OpenSSL=0.9.6d
OpenSSL OpenSSL=0.9.6e
OpenSSL OpenSSL=0.9.6f
OpenSSL OpenSSL=0.9.6g
OpenSSL OpenSSL=0.9.6h
OpenSSL OpenSSL=0.9.6i
OpenSSL OpenSSL=0.9.6j
OpenSSL OpenSSL=0.9.6k
OpenSSL OpenSSL=0.9.7
OpenSSL OpenSSL=0.9.7-beta1
OpenSSL OpenSSL=0.9.7-beta2
OpenSSL OpenSSL=0.9.7-beta3
OpenSSL OpenSSL=0.9.7a
OpenSSL OpenSSL=0.9.7b
OpenSSL OpenSSL=0.9.7c
redhat Openssl=0.9.6-15
redhat Openssl=0.9.6b-3
redhat Openssl=0.9.7a-2
redhat Openssl=0.9.7a-2
redhat Openssl=0.9.7a-2
SGI ProPack=2.3
SGI ProPack=2.4
SGI ProPack=3.0
Stonesoft Servercluster=2.5
Stonesoft Servercluster=2.5.2
Stonesoft Stonebeat Fullcluster=1_2.0
Stonesoft Stonebeat Fullcluster=1_3.0
Stonesoft Stonebeat Fullcluster=2.0
Stonesoft Stonebeat Fullcluster=2.5
Stonesoft Stonebeat Fullcluster=3.0
Stonesoft Stonebeat Securitycluster=2.0
Stonesoft Stonebeat Securitycluster=2.5
Stonesoft Stonebeat Webcluster=2.0
Stonesoft Stonebeat Webcluster=2.5
Stonesoft StoneGate=1.5.17
Stonesoft StoneGate=1.5.18
Stonesoft StoneGate=1.6.2
Stonesoft StoneGate=1.6.3
Stonesoft StoneGate=1.7
Stonesoft StoneGate=1.7.1
Stonesoft StoneGate=1.7.2
Stonesoft StoneGate=2.0.1
Stonesoft StoneGate=2.0.4
Stonesoft StoneGate=2.0.5
Stonesoft StoneGate=2.0.6
Stonesoft StoneGate=2.0.7
Stonesoft StoneGate=2.0.8
Stonesoft StoneGate=2.0.9
Stonesoft StoneGate=2.1
Stonesoft StoneGate=2.2
Stonesoft StoneGate=2.2.1
Stonesoft StoneGate=2.2.4
Tarantella Tarantella Enterprise=3.20
Tarantella Tarantella Enterprise=3.30
Tarantella Tarantella Enterprise=3.40
VMware GSX Server=2.0
VMware GSX Server=2.0.1_build_2129
VMware GSX Server=2.5.1
VMware GSX Server=2.5.1_build_5336
VMware GSX Server=3.0_build_7592
Avaya S8300=r2.0.0
Avaya S8300=r2.0.1
Avaya S8500=r2.0.0
Avaya S8500=r2.0.1
Avaya S8700=r2.0.0
Avaya S8700=r2.0.1
bluecoat ProxySG
Cisco Call Manager
Cisco Content Services Switch 11500
Cisco Gss 4480 Global Site Selector
Cisco Gss 4490 Global Site Selector
Cisco MDS 9000
Cisco Secure Content Accelerator=10000
Securecomputing Sidewinder=5.2
Securecomputing Sidewinder=5.2.0.01
Securecomputing Sidewinder=5.2.0.02
Securecomputing Sidewinder=5.2.0.03
Securecomputing Sidewinder=5.2.0.04
Securecomputing Sidewinder=5.2.1
Securecomputing Sidewinder=5.2.1.02
Sun Crypto Accelerator 4000=1.0
bluecoat Cacheos Ca Sa=4.1.10
bluecoat Cacheos Ca Sa=4.1.12
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.0\(4\)
Cisco Pix Firewall Software=6.0\(4.101\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(1\)
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=6.1\(3\)
Cisco Pix Firewall Software=6.1\(4\)
Cisco Pix Firewall Software=6.1\(5\)
Cisco Pix Firewall Software=6.2
Cisco Pix Firewall Software=6.2\(1\)
Cisco Pix Firewall Software=6.2\(2\)
Cisco Pix Firewall Software=6.2\(3\)
Cisco Pix Firewall Software=6.2\(3.100\)
Cisco Pix Firewall Software=6.3
Cisco Pix Firewall Software=6.3\(1\)
Cisco Pix Firewall Software=6.3\(2\)
Cisco Pix Firewall Software=6.3\(3.102\)
Cisco Pix Firewall Software=6.3\(3.109\)
All of the following
Any of the following
Cisco IOS=12.1\(11\)e
Cisco IOS=12.1\(11b\)e
Cisco IOS=12.1\(11b\)e12
Cisco IOS=12.1\(11b\)e14
Cisco IOS=12.1\(13\)e9
Cisco IOS=12.1\(19\)e1
Cisco IOS=12.2\(14\)sy
Cisco IOS=12.2\(14\)sy1
Cisco IOS=12.2sy
Cisco IOS=12.2za
Any of the following
4d WebStar=4.0
4d WebStar=5.2
4d WebStar=5.2.1
4d WebStar=5.2.2
4d WebStar=5.2.3
4d WebStar=5.2.4
4d WebStar=5.3
4d WebStar=5.3.1
Avaya Intuity Audix
Avaya Intuity Audix=5.1.46
Avaya Intuity Audix=s3210
Avaya Intuity Audix=s3400
Avaya Vsu=5
Avaya Vsu=5x
Avaya Vsu=100_r2.0.1
Avaya Vsu=500
Avaya Vsu=2000_r2.0.1
Avaya Vsu=5000_r2.0.1
Avaya Vsu=7500_r2.0.1
Avaya Vsu=10000_r2.0.1
Checkpoint Firewall-1
Checkpoint Firewall-1=2.0
Checkpoint Firewall-1=next_generation_fp0
Checkpoint Firewall-1=next_generation_fp1
Checkpoint Firewall-1=next_generation_fp2
Checkpoint Provider-1=4.1
Checkpoint Provider-1=4.1-sp1
Checkpoint Provider-1=4.1-sp2
Checkpoint Provider-1=4.1-sp3
Checkpoint Provider-1=4.1-sp4
Checkpoint Vpn-1=next_generation_fp0
Checkpoint Vpn-1=next_generation_fp1
Checkpoint Vpn-1=next_generation_fp2
Checkpoint Vpn-1=vsx_ng_with_application_intelligence
Cisco Access Registrar
Cisco Application And Content Networking Software
Cisco Css Secure Content Accelerator=1.0
Cisco Css Secure Content Accelerator=2.0
Cisco Css11000 Content Services Switch
Cisco Okena Stormwatch=3.2
Cisco PIX firewall=6.2.2_.111
Cisco Threat Response
Cisco WebNS=6.10
Cisco WebNS=6.10_b4
Cisco WebNS=7.1_0.1.02
Cisco WebNS=7.1_0.2.06
Cisco WebNS=7.2_0.0.03
Cisco WebNS=7.10
Cisco WebNS=7.10_.0.06s
Dell BSAFE SSL-J=3.0
Dell BSAFE SSL-J=3.0.1
Dell BSAFE SSL-J=3.1
Forcepoint Stonegate=1.5.17
Forcepoint Stonegate=1.5.18
Forcepoint Stonegate=1.6.2
Forcepoint Stonegate=1.6.3
Forcepoint Stonegate=1.7
Forcepoint Stonegate=1.7.1
Forcepoint Stonegate=1.7.2
Forcepoint Stonegate=2.0.1
Forcepoint Stonegate=2.0.4
Forcepoint Stonegate=2.0.5
Forcepoint Stonegate=2.0.6
Forcepoint Stonegate=2.0.7
Forcepoint Stonegate=2.0.8
Forcepoint Stonegate=2.0.9
Forcepoint Stonegate=2.1
Forcepoint Stonegate=2.2
Forcepoint Stonegate=2.2.1
Forcepoint Stonegate=2.2.4
HP Wbem=a.01.05.08
HP Wbem=a.02.00.00
HP Wbem=a.02.00.01
Litespeedtech Litespeed Web Server=1.0.1
Litespeedtech Litespeed Web Server=1.0.2
Litespeedtech Litespeed Web Server=1.0.3
Litespeedtech Litespeed Web Server=1.1
Litespeedtech Litespeed Web Server=1.1.1
Litespeedtech Litespeed Web Server=1.2-rc1
Litespeedtech Litespeed Web Server=1.2-rc2
Litespeedtech Litespeed Web Server=1.2.1
Litespeedtech Litespeed Web Server=1.2.2
Litespeedtech Litespeed Web Server=1.3
Litespeedtech Litespeed Web Server=1.3-rc1
Litespeedtech Litespeed Web Server=1.3-rc2
Litespeedtech Litespeed Web Server=1.3-rc3
Neoteris Instant Virtual Extranet=3.0
Neoteris Instant Virtual Extranet=3.1
Neoteris Instant Virtual Extranet=3.2
Neoteris Instant Virtual Extranet=3.3
Neoteris Instant Virtual Extranet=3.3.1
Novell eDirectory=8.0
Novell eDirectory=8.5
Novell eDirectory=8.5.12a
Novell eDirectory=8.5.27
Novell eDirectory=8.6.2
Novell eDirectory=8.7
Novell eDirectory=8.7.1
Novell eDirectory=8.7.1-sp1
Novell iManager=1.5
Novell iManager=2.0
OpenSSL OpenSSL=0.9.6c
OpenSSL OpenSSL=0.9.6d
OpenSSL OpenSSL=0.9.6e
OpenSSL OpenSSL=0.9.6f
OpenSSL OpenSSL=0.9.6g
OpenSSL OpenSSL=0.9.6h
OpenSSL OpenSSL=0.9.6i
OpenSSL OpenSSL=0.9.6j
OpenSSL OpenSSL=0.9.6k
OpenSSL OpenSSL=0.9.7
OpenSSL OpenSSL=0.9.7-beta1
OpenSSL OpenSSL=0.9.7-beta2
OpenSSL OpenSSL=0.9.7-beta3
OpenSSL OpenSSL=0.9.7a
OpenSSL OpenSSL=0.9.7b
OpenSSL OpenSSL=0.9.7c
redhat Openssl=0.9.6-15
redhat Openssl=0.9.6b-3
redhat Openssl=0.9.7a-2
redhat Openssl=0.9.7a-2
redhat Openssl=0.9.7a-2
SGI ProPack=2.3
SGI ProPack=2.4
SGI ProPack=3.0
Stonesoft Servercluster=2.5
Stonesoft Servercluster=2.5.2
Stonesoft Stonebeat Fullcluster=1_2.0
Stonesoft Stonebeat Fullcluster=1_3.0
Stonesoft Stonebeat Fullcluster=2.0
Stonesoft Stonebeat Fullcluster=2.5
Stonesoft Stonebeat Fullcluster=3.0
Stonesoft Stonebeat Securitycluster=2.0
Stonesoft Stonebeat Securitycluster=2.5
Stonesoft Stonebeat Webcluster=2.0
Stonesoft Stonebeat Webcluster=2.5
Tarantella Tarantella Enterprise=3.20
Tarantella Tarantella Enterprise=3.30
Tarantella Tarantella Enterprise=3.40
VMware GSX Server=2.0
VMware GSX Server=2.0.1_build_2129
VMware GSX Server=2.5.1
VMware GSX Server=2.5.1_build_5336
VMware GSX Server=3.0_build_7592
Avaya S8300=r2.0.0
Avaya S8300=r2.0.1
Avaya S8500=r2.0.0
Avaya S8500=r2.0.1
Avaya S8700=r2.0.0
Avaya S8700=r2.0.1
bluecoat ProxySG
Cisco Call Manager
Cisco Content Services Switch 11500
Cisco Gss 4480 Global Site Selector
Cisco Gss 4490 Global Site Selector
Cisco MDS 9000
Cisco Secure Content Accelerator=10000
Securecomputing Sidewinder=5.2
Securecomputing Sidewinder=5.2.0.01
Securecomputing Sidewinder=5.2.0.02
Securecomputing Sidewinder=5.2.0.03
Securecomputing Sidewinder=5.2.0.04
Securecomputing Sidewinder=5.2.1
Securecomputing Sidewinder=5.2.1.02
Sun Crypto Accelerator 4000=1.0
bluecoat Cacheos Ca Sa=4.1.10
bluecoat Cacheos Ca Sa=4.1.12
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.0\(4\)
Cisco Pix Firewall Software=6.0\(4.101\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(1\)
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=6.1\(3\)
Cisco Pix Firewall Software=6.1\(4\)
Cisco Pix Firewall Software=6.1\(5\)
Cisco Pix Firewall Software=6.2
Cisco Pix Firewall Software=6.2\(1\)
Cisco Pix Firewall Software=6.2\(2\)
Cisco Pix Firewall Software=6.2\(3\)
Cisco Pix Firewall Software=6.2\(3.100\)
Cisco Pix Firewall Software=6.3
Cisco Pix Firewall Software=6.3\(1\)
Cisco Pix Firewall Software=6.3\(2\)
Cisco Pix Firewall Software=6.3\(3.102\)
Cisco Pix Firewall Software=6.3\(3.109\)

Event History

Mar 18, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2004-0112?

CVE-2004-0112 is classified as high severity due to its potential to cause a denial of service by crashing the application.

2

How do I fix CVE-2004-0112?

To fix CVE-2004-0112, users should upgrade OpenSSL to version 0.9.7d or later, which includes the necessary patches.

3

What systems are affected by CVE-2004-0112?

CVE-2004-0112 affects various software utilizing OpenSSL versions 0.9.7a, 0.9.7b, and 0.9.7c, particularly those implementing Kerberos ciphersuites.

4

What kind of attacks can exploit CVE-2004-0112?

An attacker can exploit CVE-2004-0112 by sending a crafted SSL/TLS handshake that triggers a buffer overflow, leading to application crashes.

5

Was CVE-2004-0112 disclosed publicly?

Yes, CVE-2004-0112 was publicly disclosed on March 17, 2004, and has received considerable attention in the cybersecurity community.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203