Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0885
HistoryNov 03, 2004 - 5:00 a.m.

CVE-2004-0885

2004-11-0305:00:00
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

JSON

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the “SSLCipherSuite” directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

Affected configurations

NVD
Node
apachehttp_serverMatch2.0.35
OR
apachehttp_serverMatch2.0.36
OR
apachehttp_serverMatch2.0.37
OR
apachehttp_serverMatch2.0.38
OR
apachehttp_serverMatch2.0.39
OR
apachehttp_serverMatch2.0.40
OR
apachehttp_serverMatch2.0.41
OR
apachehttp_serverMatch2.0.42
OR
apachehttp_serverMatch2.0.43
OR
apachehttp_serverMatch2.0.44
OR
apachehttp_serverMatch2.0.45
OR
apachehttp_serverMatch2.0.46
OR
apachehttp_serverMatch2.0.47
OR
apachehttp_serverMatch2.0.48
OR
apachehttp_serverMatch2.0.49
OR
apachehttp_serverMatch2.0.50
OR
apachehttp_serverMatch2.0.51
OR
apachehttp_serverMatch2.0.52

References

Related

nessus 16
httpd 1
openvas 12
cve 1
freebsd 1
ubuntucve 1
debiancve 1
gentoo 1
cvelist 1
slackware 1
altlinux 3
redhat 4
suse 2
ubuntu 1
nessus
nessus
FreeBSD : mod_ssl -- SSLCipherSuite bypass (112)
2004-10-27 00:00:00
GLSA-200410-21 : Apache 2, mod_ssl: Bypass of SSLCipherSuite directive
2004-10-22 00:00:00
FreeBSD : mod_ssl -- SSLCipherSuite bypass (4238151d-207a-11d9-bfe2-0090962cff2a)
2009-04-23 00:00:00
httpd
httpd
Apache Httpd < 2.0.53 : SSLCipherSuite bypass
2004-10-01 00:00:00
openvas
openvas
FreeBSD Ports: ru-apache+mod_ssl
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200410-21 (apache)
2008-09-24 00:00:00
FreeBSD Ports: ru-apache+mod_ssl
2008-09-04 00:00:00
cve
cve
CVE-2004-0885
2004-11-03 05:00:00
freebsd
freebsd
mod_ssl -- SSLCipherSuite bypass
2004-10-01 00:00:00
ubuntucve
ubuntucve
CVE-2004-0885
2004-11-03 00:00:00
debiancve
debiancve
CVE-2004-0885
2004-11-03 05:00:00
gentoo
gentoo
Apache 2, mod_ssl: Bypass of SSLCipherSuite directive
2004-10-21 00:00:00
cvelist
cvelist
CVE-2004-0885
2004-10-16 04:00:00
slackware
slackware
[slackware-security] apache, mod_ssl, php
2004-10-26 00:40:01
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.0.52-alt3
2004-12-27 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.0.52-alt3
2004-12-27 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.0.52-alt3
2004-12-27 00:00:00
redhat
redhat
(RHSA-2004:562) httpd security update
2004-11-12 00:00:00
(RHSA-2004:600) apache, mod_ssl security update
2004-12-13 00:00:00
(RHSA-2008:0261) Moderate: Red Hat Network Satellite Server security update
2008-05-20 00:00:00
suse
suse
remote system compromise in xshared, XFree86-libs, xorg-x11-libs
2004-11-17 16:17:43
potential remote buffer overflow in samba
2004-11-15 22:07:05
ubuntu
ubuntu
Apache 2 vulnerabilities
2005-09-07 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

JSON
Related for NVD:CVE-2004-0885
nessus16httpd1openvas12cve1freebsd1ubuntucve1debiancve1gentoo1cvelist1slackware1altlinux3redhat4suse2ubuntu1