CVE-2005-3357: Null Pointer Dereference
modssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3357?
CVE-2005-3357 has a severity rating that typically signifies a denial of service vulnerability allowing application crashes.
How do I fix CVE-2005-3357?
To fix CVE-2005-3357, upgrade Apache HTTP Server to version 2.0.56 or later.
What versions of Apache HTTP Server are affected by CVE-2005-3357?
CVE-2005-3357 affects Apache HTTP Server versions from 2.0.0 up to and including 2.0.55.
What type of attack does CVE-2005-3357 involve?
CVE-2005-3357 involves an attack where a non-SSL request is made to an SSL port, leading to a denial of service.
Can CVE-2005-3357 be exploited remotely?
Yes, CVE-2005-3357 can be exploited remotely by attackers sending a non-SSL request to an SSL-enabled port.