CVE-2005-1268
Fixed in a distro release EPSS 8%
Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.
Products: apache http_server, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.0.54-5 |
| Debian 13 | apache2 | 2.0.54-5 |
| Debian 14 | apache2 | 2.0.54-5 |
| Debian 3.1 | apache2 | 2.0.54-5 |
| Red Hat Enterprise Linux 3 | httpd | 0:2.0.46-46.2.ent |
| Red Hat Enterprise Linux 3 | httpd-debuginfo | 0:2.0.46-46.2.ent |
| Red Hat Enterprise Linux 3 | httpd-devel | 0:2.0.46-46.2.ent |
| Red Hat Enterprise Linux 3 | mod_ssl | 1:2.0.46-46.2.ent |
| Red Hat Enterprise Linux 4 | httpd | 0:2.0.52-12.1.ent |
| Red Hat Enterprise Linux 4 | httpd-debuginfo | 0:2.0.52-12.1.ent |
| Red Hat Enterprise Linux 4 | httpd-devel | 0:2.0.52-12.1.ent |
| Red Hat Enterprise Linux 4 | httpd-manual | 0:2.0.52-12.1.ent |
| Red Hat Enterprise Linux 4 | httpd-suexec | 0:2.0.52-12.1.ent |
| Red Hat Enterprise Linux 4 | mod_ssl | 1:2.0.52-12.1.ent |