exploits , vulnerabilities , articles , Apache mod_ssl SSLCipherSuite Restriction Bypass Vulnerability

Title	Apache mod_ssl SSLCipherSuite Restriction Bypass Vulnerability
Published	2004-10-11-12:00AM
Updated	2005-11-02-05:07PM
Class	Design Error
CVE	CAN-2004-0885
Remote	Yes
Local	No
Credit	Discovery of this issue is credited to Hartmut Keil.
Vulnerable	VMWare ESX Server 2.1.2 VMWare ESX Server 2.1.1 VMWare ESX Server 2.0.1 build 6403 VMWare ESX Server 2.0.1 VMWare ESX Server 2.0 build 5257 VMWare ESX Server 2.0 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Desktop 10.0 Turbolinux Home Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux 8.0 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux 8.1 S.u.S.E. Linux 8.0 RedHat Stronghold 4.0 mod_ssl mod_ssl 2.8.18 mod_ssl mod_ssl 2.8.17 mod_ssl mod_ssl 2.8.16 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 mod_ssl mod_ssl 2.8.15 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 mod_ssl mod_ssl 2.8.14 Slackware Linux 9.0 mod_ssl mod_ssl 2.8.12 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc mod_ssl mod_ssl 2.8.10 Apache Software Foundation Apache 1.3.26 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 Slackware Linux 8.1 mod_ssl mod_ssl 2.8.9 Apache Software Foundation Apache 1.3.26 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 IA32 Debian Linux 2.2 powerpc Debian Linux 2.2 sparc Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc HP Secure OS software for Linux 1.0 Slackware Linux 8.1 mod_ssl mod_ssl 2.8.8 Apache Software Foundation Apache 1.3.24 mod_ssl mod_ssl 2.8.7 Apache Software Foundation Apache 1.3.23 MandrakeSoft Multi Network Firewall 2.0 RedHat Linux 7.3 RedHat Linux 7.3 i386 mod_ssl mod_ssl 2.8.6 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 Compaq Compaq Secure Web Server for OpenVMS 1.0 1 Compaq Compaq Secure Web Server for OpenVMS 1.1 1 Compaq Compaq Secure Web Server for OpenVMS 1.2 Compaq Compaq Secure Web Server for Tru64 5.5.2 mod_ssl mod_ssl 2.8.5 2 Apache Software Foundation Apache 1.3.22 mod_ssl mod_ssl 2.8.5 1 Apache Software Foundation Apache 1.3.22 mod_ssl mod_ssl 2.8.5 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 Caldera OpenLinux Server 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Workstation 3.1.1 Conectiva Linux ecommerce Conectiva Linux graficas Conectiva Linux 5.0 Conectiva Linux 5.1 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 RedHat Linux 7.0 RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.2 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 mod_ssl mod_ssl 2.8.4 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 MandrakeSoft Single Network Firewall 7.2 Slackware Linux 8.1 mod_ssl mod_ssl 2.8.3 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 mod_ssl mod_ssl 2.8.2 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 mod_ssl mod_ssl 2.8.1 2 Apache Software Foundation Apache 1.3.19 mod_ssl mod_ssl 2.8.1 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 RedHat Secure Web Server 3.2 i386 mod_ssl mod_ssl 2.8 .0 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache 1.2.5 Apache Software Foundation Apache 1.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.7 dev Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Mac 1.3.14 Mac Apache Software Foundation Apache for Windows 1.3.6 Apache Software Foundation Apache for Windows 1.3.9 Apache Software Foundation Apache for Windows 1.3.11 Apache Software Foundation Apache for Windows 1.3.12 Apache Software Foundation Apache for Windows 1.3.13 Apache Software Foundation Apache for Windows 1.3.14 Apache Software Foundation Apache for Windows 1.3.15 Apache Software Foundation Apache for Windows 1.3.16 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 IBM Hardware Management Console (HMC) for pSeries 4.0 R2.0 IBM Hardware Management Console (HMC) for pSeries 3.3.2 IBM Hardware Management Console (HMC) for iSeries 4.0 R2.0 IBM Hardware Management Console (HMC) for iSeries 3.3.2 HP HPUX B.11.23 HP HPUX B.11.22 HP HPUX B.11.11 HP HPUX B.11.11 HP HPUX B.11.04 HP HPUX B.11.00 Conectiva Linux 10.0 Avaya Network Routing Avaya Modular Messaging (MSS) 2.0 Avaya Modular Messaging (MSS) 1.1 Avaya MN100 Avaya Intuity LX Avaya Communication Manager 2.0.1 Avaya Communication Manager Server DEFINITY Server SI/CS Avaya Communication Manager Server S8100 Avaya Communication Manager Server S8300 Avaya Communication Manager Server S8500 Avaya Communication Manager Server S8700 Avaya Communication Manager 2.0 Avaya Communication Manager Server DEFINITY Server SI/CS Avaya Communication Manager Server S8100 Avaya Communication Manager Server S8300 Avaya Communication Manager Server S8500 Avaya Communication Manager Server S8700 Avaya Communication Manager 1.3.1 Avaya Communication Manager Server DEFINITY Server R10 Avaya Communication Manager Server DEFINITY Server R11 Avaya Communication Manager Server DEFINITY Server R9 Avaya Communication Manager Server S8300 Avaya Communication Manager Server S8500 Avaya Communication Manager Server S8700 Avaya Communication Manager 1.1 Avaya Communication Manager Server DEFINITY Server R10 Avaya Communication Manager Server DEFINITY Server R11 Avaya Communication Manager Server DEFINITY Server R9 Avaya Communication Manager Server S8300 Avaya Communication Manager Server S8500 Avaya Communication Manager Server S8700 Apple Mac OS X Server 10.3.9 Apache Software Foundation Apache 2.0.52 Apple Mac OS X 10.2.8 Apple Mac OS X 10.3.6 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.3.6 RedHat Desktop 4.0 RedHat Enterprise Linux AS 4 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux WS 4 Sun Solaris 10.0 Apache Software Foundation Apache 2.0.51 RedHat Fedora Core1 Apache Software Foundation Apache 2.0.50 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.1 x86_64 Apache Software Foundation Apache 2.0.49 S.u.S.E. Linux Personal 9.1 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Apache Software Foundation Apache 2.0.48 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 S.u.S.E. Linux 8.1 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 9.0 x86_64 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Apache Software Foundation Apache 2.0.47 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.5 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 Apache Software Foundation Apache 2.0.46 RedHat Desktop 3.0 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux WS 3 Trustix Secure Linux 2.0 Apache Software Foundation Apache 2.0.45 Apple Mac OS X 10.0 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.4 Apple Mac OS X 10.1 Apple Mac OS X 10.1 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.5 Apple Mac OS X 10.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.6 Conectiva Linux 9.0 Apache Software Foundation Apache 2.0.44 Apache Software Foundation Apache 2.0.43 Apache Software Foundation Apache 2.0.42 Gentoo Linux 1.2 Gentoo Linux 1.4 _rc1 Apache Software Foundation Apache 2.0.41 Apache Software Foundation Apache 2.0.40 RedHat Linux 8.0 RedHat Linux 9.0 i386 Terra Soft Solutions Yellow Dog Linux 3.0 Apache Software Foundation Apache 2.0.39 Apache Software Foundation Apache 2.0.38 Apache Software Foundation Apache 2.0.37 Apache Software Foundation Apache 2.0.36 Apache Software Foundation Apache 2.0.35
Not Vulnerable	Apache Software Foundation Apache 2.0.53
Code	An exploit is not required to leverage this issue.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-11 RT Session Fixation Vulnerability
2009-12-11 Multiple HP LaserJet Printers Unauthorized Access and Denial of Service Vulnerability
2009-12-11 Sun Ray Server Authentication Manager Remote Code Execution Vulnerability
2009-12-10 GNU Coreutils Insecure Temporary File Creation Vulnerability
2009-12-10 WebKit SVG Animation Elements User After Free Remote Code Execution Vulnerability
2009-12-10 Moodle Multiple Vulnerabilities
2009-12-10 Linux Kernel KVM Large SMP Instruction Local Denial of Service Vulnerability
2009-12-09 Adobe Flash Player and AIR Data Injection Remote Code Execution Vulnerability
2009-12-09 Adobe Flash Player ActiveX Control Information Disclosure Vulnerability
2009-12-09 Adobe Flash Player and AIR Multiple Unspecified Remote Code Execution Vulnerabilities