Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2003-08-17 21:00
Updated : 2021-06-06 04:15
NVD link : CVE-2003-0192
Mitre link : CVE-2003-0192
JSON object : View
CWE
Products Affected
apache
- http_server