high
7.5
CWE
NVD-CWE-Other
Advisory Published
Updated

CVE-2004-0885

First published: Sat Oct 16 2004(Updated: )

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Apache Http Server=2.0.42
Apache Http Server=2.0.47
Apache Http Server=2.0.50
Apache Http Server=2.0.35
Apache Http Server=2.0.37
Apache Http Server=2.0.44
Apache Http Server=2.0.39
Apache Http Server=2.0.52
Apache Http Server=2.0.51
Apache Http Server=2.0.41
Apache Http Server=2.0.49
Apache Http Server=2.0.38
Apache Http Server=2.0.48
Apache Http Server=2.0.45
Apache Http Server=2.0.40
Apache Http Server=2.0.36
Apache Http Server=2.0.46
Apache Http Server=2.0.43

Remedy

http://www.redhat.com/support/errata/RHSA-2004-600.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2004-0885?

    CVE-2004-0885 has a medium severity rating, allowing remote clients to bypass SSL cipher restrictions.

  • How do I fix CVE-2004-0885?

    To fix CVE-2004-0885, update Apache HTTP Server to a version later than 2.0.52.

  • What versions are affected by CVE-2004-0885?

    Versions of Apache HTTP Server ranging from 2.0.35 to 2.0.52 are affected by CVE-2004-0885.

  • Is CVE-2004-0885 a remote exploitation vulnerability?

    Yes, CVE-2004-0885 allows remote exploitation due to improper handling of the SSLCipherSuite directive.

  • What impact does CVE-2004-0885 have on secure connections?

    CVE-2004-0885 can potentially weaken the security of SSL connections by enabling unauthorized cipher suite usage.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203