● CVE
CVE-2004-0112
Vendorredhat, freebsd, cisco, apple, openbsdProductenterprise linux, enterprise linux desktop, freebsd, ios, mac os x, openbsd, linux, hp-ux, openserver, firewall-1, mac os x server, ciscoworks common management foundation, firewall services module, converged communications server, webstar, intuity audix, sg200, sg203, sg208, sg5, vsu, ciscoworks common services, aaa server, apache-based web server, clientless vpn gateway 4400DiscoveredNov 23, 2004UpdatedApr 16, 2026
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.