CVE

Id
9313  
CVE No.
CVE-2004-0885  
Status
Candidate  
Description
The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.  
Phase
Assigned (20040922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61740 9313 CVE-2004-0885 CONFIRM:http://www.apacheweek.com/features/security-20  View
61741 9313 CVE-2004-0885 CONFIRM:http://issues.apache.org/bugzilla/show_bug.cgi?id=31505  View
61742 9313 CVE-2004-0885 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm  View
61743 9313 CVE-2004-0885 APPLE:APPLE-SA-2005-08-15  View
61744 9313 CVE-2004-0885 URL:http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html  View
61745 9313 CVE-2004-0885 APPLE:APPLE-SA-2005-08-17  View
61746 9313 CVE-2004-0885 URL:http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html  View
61747 9313 CVE-2004-0885 HP:HPSBUX01123  View
61748 9313 CVE-2004-0885 URL:http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01123  View
61749 9313 CVE-2004-0885 REDHAT:RHSA-2004:600  View
61750 9313 CVE-2004-0885 URL:http://www.redhat.com/support/errata/RHSA-2004-600.html  View
61751 9313 CVE-2004-0885 REDHAT:RHSA-2004:562  View
61752 9313 CVE-2004-0885 URL:http://www.redhat.com/support/errata/RHSA-2004-562.html  View
61753 9313 CVE-2004-0885 REDHAT:RHSA-2005:816  View
61754 9313 CVE-2004-0885 URL:http://www.redhat.com/support/errata/RHSA-2005-816.html  View
61755 9313 CVE-2004-0885 REDHAT:RHSA-2008:0261  View
61756 9313 CVE-2004-0885 URL:http://www.redhat.com/support/errata/RHSA-2008-0261.html  View
61757 9313 CVE-2004-0885 SUNALERT:102198  View
61758 9313 CVE-2004-0885 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1  View
61759 9313 CVE-2004-0885 UBUNTU:USN-177-1  View
61760 9313 CVE-2004-0885 URL:http://www.ubuntu.com/usn/usn-177-1  View
61761 9313 CVE-2004-0885 BUGTRAQ:20041015 [OpenPKG-SA-2004.044] OpenPKG Security Advisory (modssl)  View
61762 9313 CVE-2004-0885 URL:http://marc.info/?l=bugtraq&m=109786159119069&w=2  View
61763 9313 CVE-2004-0885 BID:11360  View
61764 9313 CVE-2004-0885 URL:http://www.securityfocus.com/bid/11360  View
61765 9313 CVE-2004-0885 OVAL:oval:org.mitre.oval:def:10384  View
61766 9313 CVE-2004-0885 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10384  View
61767 9313 CVE-2004-0885 VUPEN:ADV-2006-0789  View
61768 9313 CVE-2004-0885 URL:http://www.vupen.com/english/advisories/2006/0789  View
61769 9313 CVE-2004-0885 SECUNIA:19072  View
61770 9313 CVE-2004-0885 URL:http://secunia.com/advisories/19072  View
61771 9313 CVE-2004-0885 XF:apache-sslciphersuite-restriction-bypass(17671)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63103 JVNDB-2004-000445 libtiff の不適切な malloc 呼び出しによる複数の整数オーバーフローの脆弱性 libtiff の tif_dirread.c には、不適切な malloc の呼び出す不正な TIFF イメージを処理することで、複数の整数オーバーフローが発生する脆弱性が存在します。 CVE-2004-0886 9313 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000445.html  View