Search/CVE-2004-0079
● CVE — High

CVE-2004-0079

Vendorredhat, freebsd, cisco, apple, openbsdProductenterprise linux, enterprise linux desktop, freebsd, ios, mac os x, openbsd, linux, hp-ux, openserver, firewall-1, mac os x server, ciscoworks common management foundation, firewall services module, converged communications server, webstar, intuity audix, sg200, sg203, sg208, sg5, vsu, ciscoworks common services, aaa server, apache-based web server, clientless vpn gateway 4400DiscoveredNov 23, 2004UpdatedApr 16, 2026

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS v3.1
7.5 HIGH
EPSS
9.54%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Nov 23, 2004
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026