OSVDB ID: 18286 Title: Apache HTTP Server mod_ssl ssl_callback_SSLVerify_CRL( ) Function Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
Apache HTTP Server contains a flaw that may allow a remote attacker to gain privileges. The issue is due to the mod_ssl extension module not properly validating Certificate Revocation Lists (CRL). By sending a crafted CRL, an attacker can exploit an off-by-one error in mod_ssl to cause a buffer overflow. This may allow the attacker to crash the web server or potentially execute arbitrary code. |
Classification |
Attack Type:
Input Manipulation
|
Solution |
Unknown or Incomplete |
Products |
Unknown or Incomplete |
Credit |
Unknown or Incomplete |