CVE-2005-3357

Опубликовано: 31 дек. 2005

Источник: nvd

CVSS2: 5.4

EPSS Средний

Описание

mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449
http://issues.apache.org/bugzilla/show_bug.cgi?id=37791
http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html
Vendor Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2
http://marc.info/?l=bugtraq&m=130497311408250&w=2
http://rhn.redhat.com/errata/RHSA-2006-0159.html
Patch
Vendor Advisory
http://secunia.com/advisories/18307
Patch
Vendor Advisory
http://secunia.com/advisories/18333
Patch
Vendor Advisory
http://secunia.com/advisories/18339
Patch
Vendor Advisory
http://secunia.com/advisories/18340
Patch
Vendor Advisory
http://secunia.com/advisories/18429
Patch
Vendor Advisory
http://secunia.com/advisories/18517
Patch
Vendor Advisory
http://secunia.com/advisories/18585
Patch
Vendor Advisory
http://secunia.com/advisories/18743
Patch
Vendor Advisory
http://secunia.com/advisories/19012
Vendor Advisory
http://secunia.com/advisories/21848
Vendor Advisory
http://secunia.com/advisories/22233
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.53:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.54:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.55:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.41908

Средний

5.4 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2005-3357

ubuntu

больше 19 лет назад

CVE-2005-3357

redhat

больше 19 лет назад

CVE-2005-3357

debian

больше 19 лет назад

mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost ...

GHSA-6c36-v393-c32c

github

больше 3 лет назад

EPSS

Процентиль: 97%

0.41908

Средний

5.4 Medium

CVSS2

Дефекты

CWE-399