CVE:CVE-2004-0079
CNNVD:CNNVD-200411-124
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。OpenSSL在处理SSL/TLS握手实现时存在安全漏洞使OpenSSL崩溃。使用Codenomicon TLS测试工具，OpenSSL发现在do_change_cipher_spec()函数中存在一个NULL指针分配。远程攻击者可以构建特殊的SSL/TLS握手，发送给使用OpenSSL库的服务器，可导致OpenSSL崩溃，依赖此库的应用程序会产生拒绝服务。
solution:Upgrade cisco firewall_services_module to a higher version than *,1.1.2,1.1.3,1.1_(3.005,2.1_(0.208,and avoid the version 1.1.2,1.1.3,1.1_(3.005),2.1_(0.208); Upgrade hp aaa_server to a higher version than *; Upgrade hp apache-based_web_server to a higher version than 2.0.43.00,2.0.43.04,and avoid the version 2.0.43.00,2.0.43.04; Upgrade symantec clientless_vpn_gateway_4400 to a higher version than 5.0,and avoid the version 5.0; Upgrade cisco ciscoworks_common_management_foundation to a higher version than 2.1,and avoid the version 2.1; Upgrade cisco ciscoworks_common_services to a higher version than 2.2,and avoid the version 2.2; Upgrade avaya converged_communications_server to a higher version than 2.0,and avoid the version 2.0; Upgrade avaya sg200 to a higher version than 4.4,4.31.29,and avoid the version 4.4,4.31.29; Upgrade avaya sg203 to a higher version than 4.4,4.31.29,and avoid the version 4.4,4.31.29; Upgrade avaya sg208 to a higher version than *,4.4,and avoid the version 4.4; Upgrade avaya sg5 to a higher version than 4.2,4.3,4.4,and avoid the version 4.2,4.3,4.4; Upgrade apple mac_os_x to a higher version than 10.3.3,and avoid the version 10.3.3; Upgrade apple mac_os_x_server to a higher version than 10.3.3,and avoid the version 10.3.3; Upgrade freebsd freebsd to a higher version than 4.8,4.8:releng,4.9,5.1,5.1:release,5.1:releng,5.2,5.2.1:release,and avoid the version 4.8,4.8:releng,4.9,5.1,5.1:release,5.1:releng,5.2,5.2.1:release; Upgrade hp hp-ux to a higher version than 8.05,11.00,11.11,11.23,and avoid the version 8.05,11.00,11.11,11.23; Upgrade openbsd openbsd to a higher version than 3.3,3.4,and avoid the version 3.3,3.4; Upgrade redhat enterprise_linux to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat linux to a higher version than 7.2,7.3,8.0,and avoid the version 7.2,7.3,8.0; Upgrade sco openserver to a higher version than 5.0.6,5.0.7,and avoid the version 5.0.6,5.0.7; Upgrade cisco ios to a higher version than 12.1(11e,12.1(11be,12.1(11be12,12.1(11be14,12.1(13e9,12.1(19e1,12.2(14sy,12.2(14sy1,12.2sy,12.2za,and avoid the version 12.1(11)e,12.1(11b)e,12.1(11b)e12,12.1(11b)e14,12.1(13)e9,12.1(19)e1,12.2(14)sy,12.2(14)sy1,12.2sy,12.2za; Upgrade 4d webstar to a higher version than 4.0,5.2,5.2.1,5.2.2,5.2.3,5.2.4,5.3,5.3.1,and avoid the version 4.0,5.2,5.2.1,5.2.2,5.2.3,5.2.4,5.3,5.3.1; Upgrade avaya intuity_audix to a higher version than *,5.1.46,s3210,s3400,and avoid the version 5.1.46,s3210,s3400; Upgrade avaya vsu to a higher version than 5,5x,100_r2.0.1,500,2000_r2.0.1,5000_r2.0.1,7500_r2.0.1,10000_r2.0.1,and avoid the version 5,5x,100_r2.0.1,500,2000_r2.0.1,5000_r2.0.1,7500_r2.0.1,10000_r2.0.1; Upgrade checkpoint firewall-1 to a higher version than *,2.0,next_generation_fp0,next_generation_fp1,next_generation_fp2,and avoid the version 2.0,next_generation_fp0,next_generation_fp1,next_generation_fp2; Upgrade checkpoint provider-1 to a higher version than 4.1,4.1:sp1,4.1:sp2,4.1:sp3,4.1:sp4,and avoid the version 4.1,4.1:sp1,4.1:sp2,4.1:sp3,4.1:sp4; Upgrade checkpoint vpn-1 to a higher version than next_generation_fp0,next_generation_fp1,next_generation_fp2,vsx_ng_with_application_intelligence,and avoid the version next_generation_fp0,next_generation_fp1,next_generation_fp2,vsx_ng_with_application_intelligence; Upgrade cisco access_registrar to a higher version than *; Upgrade cisco application_and_content_networking_software to a higher version than *; Upgrade cisco css_secure_content_accelerator to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade cisco css11000_content_services_switch to a higher version than *; Upgrade cisco okena_stormwatch to a higher version than 3.2,and avoid the version 3.2; Upgrade cisco pix_firewall to a higher version than 6.2.2_.111,and avoid the version 6.2.2_.111; Upgrade cisco threat_response to a higher version than *; Upgrade cisco webns to a higher version than 6.10,6.10_b4,7.1_0.1.02,7.1_0.2.06,7.2_0.0.03,7.10,7.10_.0.06s,and avoid the version 6.10,6.10_b4,7.1_0.1.02,7.1_0.2.06,7.2_0.0.03,7.10,7.10_.0.06s; Upgrade dell bsafe_ssl-j to a higher version than 3.0,3.0.1,3.1,and avoid the version 3.0,3.0.1,3.1; Upgrade hp wbem to a higher version than a.01.05.08,a.02.00.00,a.02.00.01,and avoid the version a.01.05.08,a.02.00.00,a.02.00.01; Upgrade lite speed_technologies_litespeed_web_server to a higher version than 1.0.1,1.0.2,1.0.3,1.1,1.1.1,1.2.1,1.2.2,1.2_rc1,1.2_rc2,1.3,1.3.1,1.3_rc1,1.3_rc2,1.3_rc3,and avoid the version 1.0.1,1.0.2,1.0.3,1.1,1.1.1,1.2.1,1.2.2,1.2_rc1,1.2_rc2,1.3,1.3.1,1.3_rc1,1.3_rc2,1.3_rc3; Upgrade neoteris instant_virtual_extranet to a higher version than 3.0,3.1,3.2,3.3,3.3.1,and avoid the version 3.0,3.1,3.2,3.3,3.3.1; Upgrade novell edirectory to a higher version than 8.0,8.5,8.5.12a,8.5.27,8.6.2,8.7,8.7.1,8.7.1:sp1,and avoid the version 8.0,8.5,8.5.12a,8.5.27,8.6.2,8.7,8.7.1,8.7.1:sp1; Upgrade novell imanager to a higher version than 1.5,2.0,and avoid the version 1.5,2.0; Upgrade openssl openssl to a higher version than 0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7a,0.9.7b,0.9.7c,and avoid the version 0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7a,0.9.7b,0.9.7c; Upgrade redhat openssl to a higher version than 0.9.6-15,0.9.6b-3,0.9.7a-2,and avoid the version 0.9.6-15,0.9.6b-3,0.9.7a-2; Upgrade sgi propack to a higher version than 2.3,2.4,3.0,and avoid the version 2.3,2.4,3.0; Upgrade stonesoft servercluster to a higher version than 2.5,2.5.2,and avoid the version 2.5,2.5.2; Upgrade stonesoft stonebeat_fullcluster to a higher version than 1_2.0,1_3.0,2.0,2.5,3.0,and avoid the version 1_2.0,1_3.0,2.0,2.5,3.0; Upgrade stonesoft stonebeat_securitycluster to a higher version than 2.0,2.5,and avoid the version 2.0,2.5; Upgrade stonesoft stonebeat_webcluster to a higher version than 2.0,2.5,and avoid the version 2.0,2.5; Upgrade stonesoft stonegate to a higher version than 1.5.17,1.5.18,1.6.2,1.6.3,1.7,1.7.1,1.7.2,2.0.1,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.1,2.2,2.2.1,2.2.4,and avoid the version 1.5.17,1.5.18,1.6.2,1.6.3,1.7,1.7.1,1.7.2,2.0.1,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.1,2.2,2.2.1,2.2.4; Upgrade stonesoft stonegate_vpn_client to a higher version than 1.7,1.7.2,2.0,2.0.7,2.0.8,2.0.9,and avoid the version 1.7,1.7.2,2.0,2.0.7,2.0.8,2.0.9; Upgrade tarantella tarantella_enterprise to a higher version than 3.20,3.30,3.40,and avoid the version 3.20,3.30,3.40; Upgrade vmware gsx_server to a higher version than 2.0,2.0.1_build_2129,2.5.1,2.5.1_build_5336,3.0_build_7592,and avoid the version 2.0,2.0.1_build_2129,2.5.1,2.5.1_build_5336,3.0_build_7592; Upgrade avaya s8300 to a higher version than r2.0.0,r2.0.1,and avoid the version r2.0.0,r2.0.1; Upgrade avaya s8500 to a higher version than r2.0.0,r2.0.1,and avoid the version r2.0.0,r2.0.1; Upgrade avaya s8700 to a higher version than r2.0.0,r2.0.1,and avoid the version r2.0.0,r2.0.1; Upgrade bluecoat proxysg to a higher version than *; Upgrade cisco call_manager to a higher version than *; Upgrade cisco content_services_switch_11500 to a higher version than *; Upgrade cisco gss_4480_global_site_selector to a higher version than *; Upgrade cisco gss_4490_global_site_selector to a higher version than *; Upgrade cisco mds_9000 to a higher version than *; Upgrade cisco secure_content_accelerator to a higher version than 10000,and avoid the version 10000; Upgrade securecomputing sidewinder to a higher version than 5.2,5.2.0.01,5.2.0.02,5.2.0.03,5.2.0.04,5.2.1,5.2.1.02,and avoid the version 5.2,5.2.0.01,5.2.0.02,5.2.0.03,5.2.0.04,5.2.1,5.2.1.02; Upgrade sun crypto_accelerator_4000 to a higher version than 1.0,and avoid the version 1.0; Upgrade bluecoat cacheos_ca_sa to a higher version than 4.1.10,4.1.12,and avoid the version 4.1.10,4.1.12; Upgrade cisco pix_firewall_software to a higher version than 6.0,6.0(1,6.0(2,6.0(3,6.0(4,6.0(4.101,6.1,6.1(1,6.1(2,6.1(3,6.1(4,6.1(5,6.2,6.2(1,6.2(2,6.2(3,6.2(3.100,6.3,6.3(1,6.3(2,6.3(3.102,6.3(3.109,and avoid the version 6.0,6.0(1),6.0(2),6.0(3),6.0(4),6.0(4.101),6.1,6.1(1),6.1(2),6.1(3),6.1(4),6.1(5),6.2,6.2(1),6.2(2),6.2(3),6.2(3.100),6.3,6.3(1),6.3(2),6.3(3.102),6.3(3.109)