Description

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

Remediation

References

CVE-2004-0885

Related Vulnerabilities

LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-43279)

WordPress Plugin Timesheet by BestWebSoft Cross-Site Scripting (0.1.4)

WordPress 4.7 Multiple Vulnerabilities (4.7)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0462)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-5314)

Severity

High

Classification

CVE-2004-0885

Tags

Missing Update Known Vulnerabilities