CVE-2004-0009

CVE-2004-0009 affects Apache-SSL: versions 1.3.28+1.52 and earlier are vulnerable when SSLVerifyClient is set to 1 or 3 and SSLFakeBasicAuth is enabled, allowing remote attackers to forge a client certificate using the target user’s one-line DN. Root cause involves SSLVerifyClient/SSLFakeBasicAut...

Apache-SSL < 1.3.29 / 1.53 SSLVerifyClient SSLFakeBasicAuth Client Certificate Forgery

Binary data 1167.prm...