CVE-2005-3357 - CERT CVE

  1. CVE-2005-3357

ID CVE-2005-3357
Sažetak mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.
Reference
CVSS
Base: 5.4
Impact: 6.9
Exploitability:4.9
Pristup
VektorSloženostAutentikacija
NETWORK HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE NONE COMPLETE
CVSS vektor AV:N/AC:H/Au:N/C:N/I:N/A:C
Zadnje važnije ažuriranje 13-02-2023 - 02:15
Objavljeno 31-12-2005 - 05:00