CVE-2005-2700

State: Published
Severity: Not scored
Published: Sep 6, 2005
Updated: Aug 7, 2024
Reserved: Aug 26, 2005

Description

ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

16705third-party-advisory
DSA-807vendor-advisory
SSRT051043vendor-advisory
RHSA-2005:608vendor-advisory
16700third-party-advisory
17813third-party-advisory
16743third-party-advisory
16753third-party-advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm
ADV-2005-2659vdb-entry
17088third-party-advisory
TSLSA-2005-0059vendor-advisory
22523third-party-advisory
SUSE-SA:2005:051vendor-advisory
16748third-party-advisory
USN-177-1vendor-advisory
http://people.apache.org/~jorton/CAN-2005-2700.diff
16754third-party-advisory
MDKSA-2005:161vendor-advisory
oval:org.mitre.oval:def:10416vdb-entrysignature
RHSA-2005:773vendor-advisory
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167195
SuSE-SA:2006:051vendor-advisory
RHSA-2005:816vendor-advisory
16789third-party-advisory
16714third-party-advisory
16769third-party-advisory
ADV-2006-4207vdb-entry
17288third-party-advisory
16956third-party-advisory
19072third-party-advisory
21848third-party-advisory
19188vdb-entry
ADV-2005-1625vdb-entry
16771third-party-advisory
16746third-party-advisory
GLSA-200509-12vendor-advisory
SUSE-SA:2005:052vendor-advisory
DSA-805vendor-advisory
14721vdb-entry
19073third-party-advisory
[apache-modssl] 20050902 [ANNOUNCE] mod_ssl 2.8.24-1.3.33mailing-list
VU#744929third-party-advisory
OpenPKG-SA-2005.017vendor-advisory
16864third-party-advisory
17311third-party-advisory
102197vendor-advisory
102198vendor-advisory
ADV-2006-0789vdb-entry
[httpd-dev] 20190804 Re: svn commit: r1856807 - /httpd/test/framework/trunk/t/security/CVE-2019-0215.tmailing-list
[httpd-dev] 20190806 Re: svn commit: r1856807 - /httpd/test/framework/trunk/t/security/CVE-2019-0215.tmailing-list
[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1888194 [4/13] - /httpd/site/trunk/content/security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/mailing-list
[httpd-cvs] 20210330 svn commit: r1073139 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.