CVE-2005-3357

Published: 31 December 2005

mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.

Status

References

• https://ubuntu.com/security/notices/USN-241-1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3357
• NVD
• Launchpad
• Debian