- Home
- CVEs with nessus.description==According to its banner, the version of Apache-SSL running on the
remote host is older than apache_1.3.41 ssl_1.59. Such versions fail
to properly sanitize certificate data before using it to populate
environment variables. By sending a client certificate with special
characters for the subject, a remote attacker can overwrite certain
environment variables used by the web server, resulting in memory
disclosure or potential privilege escalation in a web application.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top