Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.
                
            References
                    Configurations
                    Configuration 1 (hide)
                                
                                
  | 
                        
Configuration 2 (hide)
                                
                                
  | 
                        
Configuration 3 (hide)
                                
                                
  | 
                        
Information
                Published : 2005-08-04 21:00
Updated : 2023-02-12 17:15
NVD link : CVE-2005-1268
Mitre link : CVE-2005-1268
JSON object : View
CWE
                
                    
                        
                        CWE-193
                        
            Off-by-one Error
Products Affected
                redhat
- enterprise_linux_desktop
 - enterprise_linux_workstation
 - enterprise_linux_server
 
apache
- http_server
 
debian
- debian_linux
 


