CERTCC-2004-484726

CERTCC-2004-484726 PUBLISHED

OpenSSL contains a vulnerability in code that processes SSL/TLS handshakes when configured to use the Kerberos cipher suites. This vulnerability could allow a remote attacker to cause OpenSSL to crash.

Timeline

Mar 17, 2004 CVE Published
Mar 26, 2004 CVE Updated
Mar 17, 2026 Security Advisory

References

OpenSSL does not adequately validate length of Kerberos ticket during SSL/TLS handshake advisory
OpenSSL does not adequately validate length of Kerberos ticket during SSL/TLS handshake url
OpenSSL does not adequately validate length of Kerberos ticket during SSL/TLS handshake url
OpenSSL does not adequately validate length of Kerberos ticket during SSL/TLS handshake url
OpenSSL does not adequately validate length of Kerberos ticket during SSL/TLS handshake url

Open in Interactive Console →