Cisco IOS 12.4 and earlier when using the crypto packages and SSL support is enabled allows remote attackers to cause a denial of service via a malformed (1) ClientHello (2) ChangeCipherSpec or (3) Finished message during an SSL session.