CVE-2005-1268: Buffer Overflow
Off-by-one error in the modssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1268?
CVE-2005-1268 has a moderate severity rating due to its potential to cause denial of service through process crashes.
How do I fix CVE-2005-1268?
To fix CVE-2005-1268, upgrade to a version of Apache HTTP Server that is patched for this vulnerability.
What types of systems are affected by CVE-2005-1268?
CVE-2005-1268 affects Apache HTTP Server versions between 2.0.35 and 2.0.54, along with specific Red Hat and Debian Linux distributions.
Can CVE-2005-1268 be exploited remotely?
Yes, CVE-2005-1268 can be exploited remotely by attackers through a malicious Certificate Revocation List.
What is the nature of the vulnerability in CVE-2005-1268?
CVE-2005-1268 is an off-by-one error in the mod_ssl Certificate Revocation List verification process that can lead to a buffer overflow.