Description

Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.

Remediation

References

CVE-2003-0192

Related Vulnerabilities

WordPress Plugin Qe SEO Handyman SQL Injection (1.0)

Atlassian Jira CVE-2019-20418 Vulnerability (CVE-2019-20418)

phpMyFAQ Sensitive Cookie in HTTPS Session Without 'Secure' Attribute Vulnerability (CVE-2023-5866)

WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10152)

Dolphin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-27969)

Severity

Medium

Classification

CVE-2003-0192

Tags

Missing Update Known Vulnerabilities