CVE

Id
7020  
CVE No.
CVE-2003-0192  
Status
Candidate  
Description
Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.  
Phase
Assigned (20030401)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40967 7020 CVE-2003-0192 BUGTRAQ:20030709 [ANNOUNCE][SECURITY] Apache 2.0.47 released  View
40968 7020 CVE-2003-0192 URL:http://marc.info/?l=bugtraq&m=105776593602600&w=2  View
40969 7020 CVE-2003-0192 MANDRAKE:MDKSA-2003:075  View
40970 7020 CVE-2003-0192 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:075  View
40971 7020 CVE-2003-0192 REDHAT:RHSA-2003:240  View
40972 7020 CVE-2003-0192 URL:http://www.redhat.com/support/errata/RHSA-2003-240.html  View
40973 7020 CVE-2003-0192 REDHAT:RHSA-2003:243  View
40974 7020 CVE-2003-0192 URL:http://www.redhat.com/support/errata/RHSA-2003-243.html  View
40975 7020 CVE-2003-0192 REDHAT:RHSA-2003:244  View
40976 7020 CVE-2003-0192 URL:http://www.redhat.com/support/errata/RHSA-2003-244.html  View
40977 7020 CVE-2003-0192 SCO:CSSA-2003-SCO.28  View
40978 7020 CVE-2003-0192 SCO:SCOSA-2004.6  View
40979 7020 CVE-2003-0192 URL:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txt  View
40980 7020 CVE-2003-0192 OVAL:oval:org.mitre.oval:def:169  View

Related JVN