Read the docs

Modssl

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Modssl records in CISA KEV

No Modssl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 36

Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user v…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01138 Published 2003-04-02 Fixed CWE-193
Open these records in search →