Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2004-0081

18
FAUCET Score

CVE-2004-0081 describes a denial-of-service vulnerability in OpenSSL versions prior to 0.9.6d, affecting numerous products including those from Apple, Cisco, and Red Hat. The flaw stems from improper handling of unknown message types, leading to an infinite loop when exploited. With a CVSS score of 5.0, this vulnerability is easily exploitable over the network with low attack complexity, resulting in a partial availability impact. There is no evidence of active exploitation, nor are public exploit tools like Metasploit or ExploitDB available, and it has garnered minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*
1.1.2CPE matchmatch criteria
cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*
1.1.3CPE matchmatch criteria
cpe:2.3:h:cisco:firewall_services_module:1.1.3:*:*:*:*:*:*:*
1.1_\(3.005\)CPE matchmatch criteria
cpe:2.3:h:cisco:firewall_services_module:1.1_\(3.005\):*:*:*:*:*:*:*
2.1_\(0.208\)CPE matchmatch criteria
cpe:2.3:h:cisco:firewall_services_module:2.1_\(0.208\):*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
7.23%
Probability of exploitation in next 30 days
EPSS Percentile
93.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0723 is in the 91st percentile among its peer group of 23,701 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (8)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: openssl-0:0.9.7a-33.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: openssl096b-0:0.9.6b-16
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AS (Advanced Server) version 2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux ES version 2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux WS version 2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Linux 9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Linux Advanced Workstation 2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Stronghold 4
View patch

Vendor Advisories (1)

redhatCVE-2004-0081Low

security flaw

Mar 17, 2004

References

ftp.sco.com / pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
patches.sgi.com / support/free/security/advisories/20040304-01-U.asc
distro.conectiva.com.br / atualizacoes
fedoranews.org / updates/FEDORA-2004-095.shtml
marc.info
marc.info
rhn.redhat.com / errata/RHSA-2004-119.html
secunia.com / advisories/11139
security.gentoo.org / glsa/glsa-200403-03.xml
exchange.xforce.ibmcloud.com / vulnerabilities/15509
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11755
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A902
sunsolve.sun.com / pub-cgi/retrieve.pl
cisco.com / warp/public/707/cisco-sa-20040317-openssl.shtml
debian.org / security/2004/dsa-465
kb.cert.org / vuls/id/465542
Third Party AdvisoryUS Government Resource
linuxsecurity.com / advisories/engarde_advisory-4135.html
redhat.com / support/errata/RHSA-2004-120.html
redhat.com / support/errata/RHSA-2004-121.html
redhat.com / support/errata/RHSA-2004-139.html
securityfocus.com / bid/9899
Vendor Advisory
trustix.org / errata/2004/0012
uniras.gov.uk / vuls/2004/224012/index.htm
us-cert.gov / cas/techalerts/TA04-078A.html
US Government Resource