CVE-2005-2700: apache http_server

CVSS: 10.0v2.0HighModified

AliasesDEBIAN-CVE-2005-2700DSA-807-1

Published 06-09-2005Last modified 07-08-2024

Vulnerability summary

CVE-2005-2700 is a high (CVSS 10.0) vulnerability in apache http_server. EPSS estimates a 30.58% chance of exploitation in the next 30 days, higher than 98.2% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

30.58%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2

DSA-805-1 RHSA-2005:608

Timeline

06-09-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

30.58%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 30.58% on 18-09-2026

18-09-202618-10-2026

EPSS score

30.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Debian3 products

apache2< 2.0.54-5
libapache-mod-ssl< 2.8.9-2.5 | < 2.8.22-1sarge1
debian_linuxEOL3.0 | 3.1

Apache1 product

http_server≥ 2.0.35, < 2.0.55

Canonical1 product

ubuntu_linuxEOL4.10 | 5.04

3 vendors · 5 products

References

65 links

secunia.com/advisories/16705Third Party AdvisoryX Refsource SECUNIANot Applicable
www.debian.org/security/2005/dsa-807Vendor AdvisoryX Refsource DEBIANThird Party Advisory
marc.info?l=bugtraq&m=112870296926652&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
www.redhat.com/support/errata/RHSA-2005-608.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/16700Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/17813Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/16743Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/16753Third Party AdvisoryX Refsource SECUNIANot Applicable
support.avaya.com/elmodocs2/security/ASA-2006-081.htmX Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2005/2659VDB EntryX Refsource VUPENPermissions Required

Show all 65 references

secunia.com/advisories/17088Third Party AdvisoryX Refsource SECUNIANot Applicable
lists.trustix.org/pipermail/tsl-announce/2005-October/000354.htmlVendor AdvisoryX Refsource TRUSTIXBroken Link
secunia.com/advisories/22523Third Party AdvisoryX Refsource SECUNIANot Applicable
www.novell.com/linux/security/advisories/2005_51_apache2.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/16748Third Party AdvisoryX Refsource SECUNIANot Applicable
www.ubuntu.com/usn/usn-177-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
people.apache.org/~jorton/CAN-2005-2700.diffX Refsource CONFIRMVendor Advisory
secunia.com/advisories/16754Third Party AdvisoryX Refsource SECUNIANot Applicable
www.mandriva.com/security/advisories?name=MDKSA-2005:161Vendor AdvisoryX Refsource MANDRIVABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10416VDB EntrySignatureX Refsource OVALThird Party Advisory
www.redhat.com/support/errata/RHSA-2005-773.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117X Refsource CONFIRMBroken Link
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=167195X Refsource CONFIRMIssue TrackingThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2006-09/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.redhat.com/support/errata/RHSA-2005-816.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/16789Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/16714Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/16769Third Party AdvisoryX Refsource SECUNIANot Applicable
www.vupen.com/english/advisories/2006/4207VDB EntryX Refsource VUPENPermissions Required
secunia.com/advisories/17288Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/16956Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/19072Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/21848Third Party AdvisoryX Refsource SECUNIANot Applicable
www.osvdb.org/19188VDB EntryX Refsource OSVDBBroken Link
www.vupen.com/english/advisories/2005/1625VDB EntryX Refsource VUPENPermissions Required
secunia.com/advisories/16771Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/16746Third Party AdvisoryX Refsource SECUNIANot Applicable
www.gentoo.org/security/en/glsa/glsa-200509-12.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.novell.com/linux/security/advisories/2005_52_apache2.htmlVendor AdvisoryX Refsource SUSEBroken Link
www.debian.org/security/2005/dsa-805Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.securityfocus.com/bid/14721VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/19073Third Party AdvisoryX Refsource SECUNIANot Applicable
marc.info?l=apache-modssl&m=112569517603897&w=2Mailing ListX Refsource MLISTThird Party Advisory
www.kb.cert.org/vuls/id/744929Third Party AdvisoryX Refsource CERT VNUS Government Resource
marc.info?l=bugtraq&m=112604765028607&w=2Vendor AdvisoryX Refsource OPENPKGIssue TrackingMailing ListThird Party Advisory
secunia.com/advisories/16864Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/17311Third Party AdvisoryX Refsource SECUNIANot Applicable
sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1Vendor AdvisoryX Refsource SUNALERTBroken Link
sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.vupen.com/english/advisories/2006/0789VDB EntryX Refsource VUPENPermissions Required
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
security-tracker.debian.org/tracker/CVE-2005-2700Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities