NVD

Id
71291  
Name
CVE-2004-0885  
Description
The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-11-03  
Modified Date
2017-07-10  
Seq
2004-0885  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368429 71291 CVE-2004-0885 http://issues.apache.org/bugzilla/show_bug.cgi?id=31505  View
368430 71291 CVE-2004-0885 APPLE-SA-2005-08-17  View
368431 71291 CVE-2004-0885 APPLE-SA-2005-08-15  View
368432 71291 CVE-2004-0885 20041015 [OpenPKG-SA-2004.044] OpenPKG Security Advisory (modssl)  View
368433 71291 CVE-2004-0885 oval:org.mitre.oval:def:10384  View
368434 71291 CVE-2004-0885 102198  View
368435 71291 CVE-2004-0885 http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm  View
368436 71291 CVE-2004-0885 http://www.apacheweek.com/features/security-20  View
368437 71291 CVE-2004-0885 RHSA-2004:562  View
368438 71291 CVE-2004-0885 RHSA-2004:600  View
368439 71291 CVE-2004-0885 RHSA-2005:816  View
368440 71291 CVE-2004-0885 RHSA-2008:0261  View
368441 71291 CVE-2004-0885 11360  View
368442 71291 CVE-2004-0885 USN-177-1  View
368443 71291 CVE-2004-0885 ADV-2006-0789  View
368444 71291 CVE-2004-0885 HPSBUX01123  View
368445 71291 CVE-2004-0885 apache-sslciphersuite-restriction-bypass(17671)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63080 JVNDB-2004-000422 Apache HTTP Server の mod_ssl における特定のリソースへのアクセスが可能な脆弱性 Apache HTTP Server の mod_ssl には、SSLCipherSuite ディレクティブを有効にして、特定のリソースに対して暗号スイートを限定しているにも関らず、バーチャルホストに対して許可している暗号スイートを使用することでネゴシエーション可能である脆弱性が存在します。 CVE-2004-0885 9312 CVE-2004-0885 71291 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000422.html 2004-10-11 2007-04-01 View