Lucene search

K
osvGoogleOSV:DSA-807-1
HistorySep 12, 2005 - 12:00 a.m.

libapache-mod-ssl - acl restriction bypass

2005-09-1200:00:00
Google
osv.dev
8

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

A problem has been discovered in mod_ssl, which provides strong
cryptography (HTTPS support) for Apache that allows remote attackers
to bypass access restrictions.

For the old stable distribution (woody) this problem has been fixed in
version 2.8.9-2.5.

For the stable distribution (sarge) this problem has been fixed in
version 2.8.22-1sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 2.8.24-1.

We recommend that you upgrade your libapache-mod-ssl package.

CPENameOperatorVersion
libapache-mod-ssleq2.8.22-1

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C