ID CVE-2004-0120
Summary The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
References
Vulnerable Configurations
  • cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 12-10-2018 - 21:33)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
assigner via4 cve@mitre.org
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
oval via4
  • accepted 2015-08-10T04:01:11.375-04:00
    class vulnerability
    contributors
    • name David Proulx
      organization The MITRE Corporation
    • name Glenn Strickland
      organization Secure Elements, Inc.
    • name Maria Mikhno
      organization ALTX-SOFT
    definition_extensions
    comment Microsoft Windows Server 2003 is installed
    oval oval:org.mitre.oval:def:128
    description The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
    family windows
    id oval:org.mitre.oval:def:885
    status accepted
    submitted 2004-04-13T12:00:00.000-04:00
    title Windows Server 2003 SSL Library Denial of Service
    version 69
  • accepted 2015-08-10T04:01:11.507-04:00
    class vulnerability
    contributors
    • name David Proulx
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    • name Glenn Strickland
      organization Secure Elements, Inc.
    • name Shane Shaffer
      organization G2, Inc.
    • name Sudhir Gandhe
      organization Telos
    • name Shane Shaffer
      organization G2, Inc.
    • name Maria Mikhno
      organization ALTX-SOFT
    definition_extensions
    • comment Microsoft Windows XP (32-bit) is installed
      oval oval:org.mitre.oval:def:1353
    • comment Microsoft Windows XP SP1 (32-bit) is installed
      oval oval:org.mitre.oval:def:1
    description The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
    family windows
    id oval:org.mitre.oval:def:886
    status accepted
    submitted 2004-04-13T12:00:00.000-04:00
    title Windows XP SSL Library Denial of Service
    version 75
  • accepted 2007-05-23T15:05:54.714-04:00
    class vulnerability
    contributors
    • name David Proulx
      organization The MITRE Corporation
    • name Glenn Strickland
      organization Secure Elements, Inc.
    description The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
    family windows
    id oval:org.mitre.oval:def:892
    status accepted
    submitted 2004-04-13T12:00:00.000-04:00
    title Windows 2000 SSL Library Denial of Service
    version 64
refmap via4
bid 10115
cert TA04-104A
cert-vn VU#150236
ciac O-114
ms MS04-011
xf ssl-message-dos(15712)
vulnerable_product via4
  • cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
Last major update 12-10-2018 - 21:33
Published 01-06-2004 - 04:00
Back to Top