Approved changes feed: RSS · Atom

cpe:2.3:a:dell:bsafe_ssl-j:3.1:*:*:*:*:*:*:*

part: a version: 3.1 update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductBsafe Ssl J (361014fa-0922-58d2-8c36-f24532dbb437)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-0112 vulnerable 2026-06-08 04:47:48.546851 Details available
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
Published: 2004-03-18T05:00:00.000Z
Updated: 2024-08-08T00:10:03.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0081 vulnerable 2026-06-08 04:47:48.456844 Details available
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
Published: 2004-03-18T05:00:00.000Z
Updated: 2024-08-08T00:01:23.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0079 vulnerable 2026-06-08 04:47:48.343693 Details available
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Published: 2004-03-18T05:00:00.000Z
Updated: 2025-01-16T17:33:22.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1105 vulnerable 2026-06-08 04:45:21.454315 Details available
RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.
Published: 2002-03-15T05:00:00.000Z
Updated: 2024-08-08T04:44:07.335Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.