CVE-2003-0192: Medium severity Apache HTTP Server vulnerability
Apache 2 before 2.0.47, and certain versions of modssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Http Serverto a version that resolves this vulnerability.Fixed in 2.0.47
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0192?
CVE-2003-0192 is considered a moderate severity vulnerability.
How do I fix CVE-2003-0192?
To fix CVE-2003-0192, upgrade Apache HTTP Server to version 2.0.47 or later.
What versions of Apache are affected by CVE-2003-0192?
CVE-2003-0192 affects Apache versions 2.0.45 and earlier, as well as certain versions of mod_ssl for Apache 1.3.
What impact does CVE-2003-0192 have on Apache users?
CVE-2003-0192 can lead to the usage of weak ciphersuites during renegotiations, decreasing the security of encrypted connections.
Is CVE-2003-0192 related to SSL/TLS security?
Yes, CVE-2003-0192 is related to SSL/TLS security due to its impact on the handling of cipher suites.