Evil-DB LogoEvil-DB
← All CVEs

CVE-2005-3357

medium · 5.4

mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.

5.4
CVSS
24.3%
EPSS (exploit prob.)
98th
EPSS percentile
2005-12-31
Published

AV:N/AC:H/Au:N/C:N/I:N/A:C

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
apachehttp_server2.0
apachehttp_server2.0.9
apachehttp_server2.0.28
apachehttp_server2.0.28
apachehttp_server2.0.32
apachehttp_server2.0.35
apachehttp_server2.0.36
apachehttp_server2.0.37
apachehttp_server2.0.38
apachehttp_server2.0.39
apachehttp_server2.0.40
apachehttp_server2.0.41
apachehttp_server2.0.42
apachehttp_server2.0.43
apachehttp_server2.0.44
apachehttp_server2.0.45
apachehttp_server2.0.46
apachehttp_server2.0.47
apachehttp_server2.0.48
apachehttp_server2.0.49
apachehttp_server2.0.50
apachehttp_server2.0.51
apachehttp_server2.0.52
apachehttp_server2.0.53
apachehttp_server2.0.54
apachehttp_server2.0.55

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-3357