Description

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

Remediation

References

CVE-2004-0885

Related Vulnerabilities

Lighttpd Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-19052)

MySQL Other Vulnerability (CVE-2007-6304)

Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-0819)

PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5287)

Oracle JRE CVE-2013-2418 Vulnerability (CVE-2013-2418)

Severity

High

Classification

CVE-2004-0885

Tags

Missing Update Known Vulnerabilities