CVE-2004-0885

Apache HTTP Server 2.0.35-2.0.52 - Unauthenticated Cipher Suite Restriction Bypass via mod_ssl

Title source: llm
STIX 2.1

Description

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

References (30)

Core 30
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11360
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-562.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-177-1
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109786159119069&w=2
Various Sources vendor-advisory x_refsource_hp
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01123
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17671
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0261.html
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-600.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-816.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10384
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19072
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1
Various Sources x_refsource_confirm
http://issues.apache.org/bugzilla/show_bug.cgi?id=31505
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0789
Various Sources x_refsource_confirm
http://www.apacheweek.com/features/security-20

Scores

EPSS 0.1384
EPSS Percentile 96.1%

Details

Status published
Products (18)
apache/http_server 2.0.35
apache/http_server 2.0.36
apache/http_server 2.0.37
apache/http_server 2.0.38
apache/http_server 2.0.39
apache/http_server 2.0.40
apache/http_server 2.0.41
apache/http_server 2.0.42
apache/http_server 2.0.43
apache/http_server 2.0.44
... and 8 more
Published Nov 03, 2004
Tracked Since Feb 18, 2026