Bug 177914 - CVE-2005-3357 mod_ssl crash in FC5test2
Summary: CVE-2005-3357 mod_ssl crash in FC5test2
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: httpd
Version: 5
Hardware: All
OS: Linux
medium
low
Target Milestone: ---
Assignee: Joe Orton
QA Contact:
URL:
Whiteboard: impact=low,source=asf,reported=200512...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-01-16 13:00 UTC by Mark J. Cox
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version: 2.2.0-5
Clone Of:
Environment:
Last Closed: 2006-02-03 10:41:32 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Mark J. Cox 2006-01-16 13:00:53 UTC 
+++ This bug was initially created as a clone of Bug #175720 +++

This is a mod_ssl issue which only affects 2.x:
http://issues.apache.org/bugzilla/show_bug.cgi?id=37791

It's a remotely-triggered NULL pointer 
dereference (so interesting only if you use a threaded MPM), affects 
server configurations with an SSL vhost configured with access control 
and a custom 400 errordocument; so this is rated "low".
Comment 1 Mark J. Cox 2006-01-31 08:18:17 UTC 
ping!  if fixed in rawhide please close this bug, otherwise please try to fix
this before FC5Test3 (Feb 6)
Comment 2 Joe Orton 2006-02-03 10:41:32 UTC 
Fixed in 2.2.0-5.
Note You need to log in before you can comment on or make changes to this bug.