CVE-2004-0081: 4d webstar
CVSS: 5.0v2.0MediumModified
AliasesDEBIAN-CVE-2004-0081
Published 18-03-2004Last modified 08-08-2024
Some data may be incomplete
- 2 references with an unsupported link type were hidden.
Vulnerability summary
CVE-2004-0081 is a medium (CVSS 5.0) vulnerability in 4d webstar. EPSS estimates a 7.23% chance of exploitation in the next 30 days, higher than 94.2% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
7.23%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 18-03-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
7.23%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 7.23% on 18-09-2026
18-09-202618-10-2026
EPSS score7.23%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Avaya10 products
- converged_communications_server2.0
- intuity_audix5.1.46 | s3210 | s3400
- s8300r2.0.0 | r2.0.1
- s8500r2.0.0 | r2.0.1
- s8700r2.0.0 | r2.0.1
Cisco10 products
- ciscoworks_common_management_foundation2.1
- ciscoworks_common_services2.2
- css_secure_content_accelerator1.0 | 2.0
- firewall_services_module1.1.2 | 1.1.3 | 1.1_\(3.005\) | 2.1_\(0.208\)
- ios12.1\(11\)e | 12.1\(11b\)e | 12.1\(11b\)e12 | 12.1\(11b\)e14 | 12.1\(13\)e9 | 12.1\(19\)e1 | 12.2\(14\)sy | 12.2\(14\)sy1 | 12.2sy | 12.2za
Stonesoft6 products
- servercluster2.5 | 2.5.2
- stonebeat_fullcluster1_2.0 | 1_3.0 | 2.0 | 2.5 | 3.0
- stonebeat_securitycluster2.0 | 2.5
- stonebeat_webcluster2.0 | 2.5
- stonegate1.5.17 | 1.5.18 | 1.6.2 | 1.6.3 | 1.7 | 1.7.1 | 1.7.2 | 2.0.1 | 2.0.4 | 2.0.5 | 2.0.6 | 2.0.7 | 2.0.8 | 2.0.9 | 2.1 | 2.2 | 2.2.1 | 2.2.4
Redhat4 products
- enterprise_linux3.0
- enterprise_linux_desktop3.0
- linux7.2 | 7.3 | 8.0
- openssl0.9.6-15 | 0.9.6b-3 | 0.9.7a-2
Checkpoint3 products
- firewall-12.0 | next_generation_fp0 | next_generation_fp1 | next_generation_fp2
- provider-14.1 | 4.1:sp1 | 4.1:sp2 | 4.1:sp3 | 4.1:sp4
- vpn-1next_generation | next_generation_fp0 | next_generation_fp1 | vsx_ng_with_application_intelligence
Hp3 products
- apache-based_web_server2.0.43.00 | 2.0.43.04
- hp-ux8.05 | 11.00 | 11.11 | 11.23
- wbema.01.05.08 | a.02.00.00 | a.02.00.01
Apple2 products
- mac_os_x10.3.3
- mac_os_x_server10.3.3
Novell2 products
- edirectory8.0 | 8.5 | 8.5.12a | 8.5.27 | 8.6.2 | 8.7 | 8.7.1 | 8.7.1:sp1
- imanager1.5 | 2.0
4d1 product
- webstar4.0 | 5.2 | 5.2.1 | 5.2.2 | 5.2.3 | 5.2.4 | 5.3 | 5.3.1
Bluecoat1 product
- cacheos_ca_sa4.1.10 | 4.1.12
Debian1 product
- openssl< 0.9.6d-1
Dell1 product
- bsafe_ssl-j3.0 | 3.0.1 | 3.1
Freebsd1 product
- freebsdEOL4.8 | 4.8:releng | 4.9 | 5.1 | 5.1:release | 5.1:releng | 5.2 | 5.2.1:release
Lite1 product
- speed_technologies_litespeed_web_server1.0.1 | 1.0.2 | 1.0.3 | 1.1 | 1.1.1 | 1.2.1 | 1.2.2 | 1.2_rc1 | 1.2_rc2 | 1.3 | 1.3.1 | 1.3_rc1 | 1.3_rc2 | 1.3_rc3
Neoteris1 product
- instant_virtual_extranet3.0 | 3.1 | 3.2 | 3.3 | 3.3.1
Openbsd1 product
- openbsdEOL3.3 | 3.4
Openssl1 product
- openssl0.9.6c | 0.9.6d | 0.9.6e | 0.9.6f | 0.9.6g | 0.9.6h | 0.9.6i | 0.9.6j | 0.9.6k | 0.9.7 | 0.9.7:beta1 | 0.9.7:beta2 | 0.9.7:beta3 | 0.9.7a | 0.9.7b | 0.9.7c
Sco1 product
- openserver5.0.6 | 5.0.7
Securecomputing1 product
- sidewinder5.2 | 5.2.0.01 | 5.2.0.02 | 5.2.0.03 | 5.2.0.04 | 5.2.1 | 5.2.1.02
Sgi1 product
- propack2.3 | 2.4 | 3.0
Sun1 product
Symantec1 product
Tarantella1 product
- tarantella_enterprise3.20 | 3.30 | 3.40
Vmware1 product
- gsx_server2.0 | 2.0.1_build_2129 | 2.5.1 | 2.5.1_build_5336 | 3.0_build_7592
24 vendors · 56 products
References
24 links- www.uniras.gov.uk/vuls/2004/224012/index.htmX Refsource MISC
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871VDB EntrySignatureX Refsource OVAL
Show all 24 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11755VDB EntrySignatureX Refsource OVAL
- www.us-cert.gov/cas/techalerts/TA04-078A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A902VDB EntrySignatureX Refsource OVAL