Vulnerabilities

TI-2002-01125 CVE-2002-1157 · GHSA-42vq-2xjj-6g8w

Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when…

MEDIUM 46

Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the s…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.11124 Published 2004-09-01 Fixed

TI-2004-00641 CVE-2004-0700 · GHSA-mm6m-9rf6-5j2q

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c…

MEDIUM 42

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specif…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05802 Published 2004-07-21 Fixed

TI-2002-00078 CVE-2002-0082 · GHSA-4fj5-x3ch-mc34

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before…

MEDIUM 56

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.29662 Published 2002-06-25 Fixed

Vulnerabilities

Filters

Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when…

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c…

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before…