Description

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

Remediation

References

CVE-2004-0885

Related Vulnerabilities

axios Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-45857)

osCommerce Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-27976)

WordPress Plugin Magn WP Drag and Drop Upload Arbitrary File Upload (1.1.4)

PostgreSQL CVE-2021-32029 Vulnerability (CVE-2021-32029)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Cross-Site Scripting (2.0.14)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2004-0885