Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Information
Published : 2005-08-04 21:00
Updated : 2023-02-12 17:15
NVD link : CVE-2005-1268
Mitre link : CVE-2005-1268
JSON object : View
CWE
CWE-193
Off-by-one Error
Products Affected
redhat
- enterprise_linux_desktop
- enterprise_linux_workstation
- enterprise_linux_server
apache
- http_server
debian
- debian_linux