CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-2700

ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.067

EPSS Ranking 90.9%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2005-2700

Apache » Http Server » Version: 2.0.35

cpe:2.3:a:apache:http_server:2.0.35
Apache » Http Server » Version: 2.0.36

cpe:2.3:a:apache:http_server:2.0.36
Apache » Http Server » Version: 2.0.37

cpe:2.3:a:apache:http_server:2.0.37
Apache » Http Server » Version: 2.0.38

cpe:2.3:a:apache:http_server:2.0.38
Apache » Http Server » Version: 2.0.39

cpe:2.3:a:apache:http_server:2.0.39
Apache » Http Server » Version: 2.0.40

cpe:2.3:a:apache:http_server:2.0.40
Apache » Http Server » Version: 2.0.41

cpe:2.3:a:apache:http_server:2.0.41
Apache » Http Server » Version: 2.0.42

cpe:2.3:a:apache:http_server:2.0.42
Apache » Http Server » Version: 2.0.43

cpe:2.3:a:apache:http_server:2.0.43
Apache » Http Server » Version: 2.0.44

cpe:2.3:a:apache:http_server:2.0.44
Apache » Http Server » Version: 2.0.45

cpe:2.3:a:apache:http_server:2.0.45
Apache » Http Server » Version: 2.0.46

cpe:2.3:a:apache:http_server:2.0.46
Apache » Http Server » Version: 2.0.47

cpe:2.3:a:apache:http_server:2.0.47
Apache » Http Server » Version: 2.0.48

cpe:2.3:a:apache:http_server:2.0.48
Apache » Http Server » Version: 2.0.49

cpe:2.3:a:apache:http_server:2.0.49
Apache » Http Server » Version: 2.0.50

cpe:2.3:a:apache:http_server:2.0.50
Apache » Http Server » Version: 2.0.51

cpe:2.3:a:apache:http_server:2.0.51
Apache » Http Server » Version: 2.0.52

cpe:2.3:a:apache:http_server:2.0.52
Apache » Http Server » Version: 2.0.53

cpe:2.3:a:apache:http_server:2.0.53
Apache » Http Server » Version: 2.0.54

cpe:2.3:a:apache:http_server:2.0.54
Canonical » Ubuntu Linux » Version: 4.10

cpe:2.3:o:canonical:ubuntu_linux:4.10
Canonical » Ubuntu Linux » Version: 5.04

cpe:2.3:o:canonical:ubuntu_linux:5.04
Debian » Debian Linux » Version: 3.0

cpe:2.3:o:debian:debian_linux:3.0
Debian » Debian Linux » Version: 3.1

cpe:2.3:o:debian:debian_linux:3.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-2700

Products

Pricing

Contact Us