7.5

CVE-2004-0079: 4d webstar NULL Pointer Dereference

CVSS: 7.5v3.1HighModified
AliasesDEBIAN-CVE-2004-0079
Published 18-03-2004Last modified 16-01-2025
Open JSON
Some data may be incomplete
  • 3 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2004-0079 is a high (CVSS 7.5) NULL Pointer Dereference vulnerability in 4d webstar. EPSS estimates a 9.54% chance of exploitation in the next 30 days, higher than 95.4% of scored vulnerabilities.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
9.54%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2
DSA-465RHSA-2004:120

Timeline

  1. 18-03-2004
    PublishedVulnerability first disclosed.
  2. 16-01-2025
    Last modifiedVulnerability information updated.

Description

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

9.54%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 9.54% on 18-09-2026

18-09-202618-10-2026
EPSS score
9.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Avaya10 products
Cisco10 products
Stonesoft6 products
Redhat4 products
Checkpoint3 products
  • firewall-12.0 | next_generation_fp0 | next_generation_fp1 | next_generation_fp2
  • provider-14.1 | 4.1:sp1 | 4.1:sp2 | 4.1:sp3 | 4.1:sp4
  • vpn-1next_generation_fp0 | next_generation_fp1 | next_generation_fp2 | vsx_ng_with_application_intelligence
Hp3 products
Apple2 products
Novell2 products
4d1 product
  • webstar4.0 | 5.2 | 5.2.1 | 5.2.2 | 5.2.3 | 5.2.4 | 5.3 | 5.3.1
Bluecoat1 product
Debian1 product
  • openssl< 0.9.7d-1
Dell1 product
Freebsd1 product
  • freebsdEOL4.8 | 4.8:releng | 4.9 | 5.1 | 5.1:release | 5.1:releng | 5.2 | 5.2.1:release
Lite1 product
Neoteris1 product
Openbsd1 product
Openssl1 product
  • openssl0.9.6c | 0.9.6d | 0.9.6e | 0.9.6f | 0.9.6g | 0.9.6h | 0.9.6i | 0.9.6j | 0.9.6k | 0.9.7 | 0.9.7:beta1 | 0.9.7:beta2 | 0.9.7:beta3 | 0.9.7a | 0.9.7b | 0.9.7c
Sco1 product
Securecomputing1 product
  • sidewinder5.2 | 5.2.0.01 | 5.2.0.02 | 5.2.0.03 | 5.2.0.04 | 5.2.1 | 5.2.1.02
Sgi1 product
Sun1 product
Symantec1 product
Tarantella1 product
Vmware1 product
  • gsx_server2.0 | 2.0.1_build_2129 | 2.5.1 | 2.5.1_build_5336 | 3.0_build_7592

24 vendors · 56 products

References

43 links
Show all 43 references