apache-ssl records
3 published records for vendor apache-ssl.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2002-0082Proof of concept | The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory usapache-ssl · apache-ssl | High7.5 | — | 29.7% | Mar 15, 2002 |
31Monitor | CVE-2008-0555No exploit | The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguishapache-ssl · apache-ssl · CWE-20 | High7.5 | — | 1.9% | Apr 3, 2008 |
30Monitor | CVE-2004-0009No exploit | Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a clieapache-ssl · apache-ssl | High7.5 | — | 1.2% | Mar 3, 2004 |
- CVE-2002-008239Monitor
The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory us
HighCVSS 7.5Proof of conceptEPSS 30%apache-ssl · apache-sslMar 15, 2002
- CVE-2008-055531Monitor
The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguish
HighCVSS 7.5No exploitEPSS 2%apache-ssl · apache-sslApr 3, 2008
- CVE-2004-000930Monitor
Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a clie
HighCVSS 7.5No exploitEPSS 1%apache-ssl · apache-sslMar 3, 2004