CVE-2005-3357
apache http server: no CVSS score yet. EPSS 24% chance of exploitation in the next 30 days.
mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.
- EPSS
- 24% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:http_server
References
- ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449
- http://issues.apache.org/bugzilla/show_bug.cgi?id=37791
- http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
- http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html