Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotia

Summary

Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.

Timeline

1. Jul 10, 2003, 4:00 AM UTCCVE published
2. Aug 8, 2024, 1:43 AM UTCRecord last updated

Affected versions

• n/a n/a

  Version range not reported

References 19