Denial of Service Vulnerability in OpenSSL Versions Affected by Kerberos Ciphersuites

CVE-2004-0112

Summary

The SSL/TLS handshaking process in specific OpenSSL versions contains a flaw when using Kerberos ciphersuites. The vulnerability arises from improper length checks for Kerberos tickets, which can be exploited by attackers. By sending a carefully crafted SSL/TLS handshake, attackers can trigger an out-of-bounds read, leading to a denial of service condition, effectively crashing the application. This issue highlights the importance of ensuring secure handling of authentication tickets within cryptographic protocols.

References