CVE-2005-3357: apache http_server Resource Management Errors

Modified

AliasesDEBIAN-CVE-2005-3357

Published 06-01-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2005-3357 is a medium (CVSS 5.4) Resource Management Errors vulnerability in apache http_server. EPSS estimates a 24.29% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 5.4, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.4/10

010

Medium · v2.0 (NVD)

EPSS score

24.29%

0%100%

High · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1

OPENSUSE-SU-2024:10623-1 RHSA-2006:0159

Timeline

06-01-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.

CVSS metrics

1 score · 1 source · 1 version

v2.05.4

EPSS trend

Probability

24.29%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

No change 0.00 pp

From 24.29% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Apache1 product

http_serverEOL2.0 | 2.0.9 | 2.0.28 | 2.0.28:beta | 2.0.32 | 2.0.35 | 2.0.36 | 2.0.37 | 2.0.38 | 2.0.39 | 2.0.40 | 2.0.41 | 2.0.42 | 2.0.43 | 2.0.44 | 2.0.45 | 2.0.46 | 2.0.47 | 2.0.48 | 2.0.49 | 2.0.50 | 2.0.51 | 2.0.52 | 2.0.53 | 2.0.54 | 2.0.55

Debian1 product

apache2< 2.0.55-4

2 vendors · 2 products

References

66 links

www.vupen.com/english/advisories/2006/3995VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/22992Third Party AdvisoryX Refsource SECUNIAVendor Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-102662-1Vendor AdvisoryX Refsource SUNALERT
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449Vendor AdvisoryX Refsource HP
secunia.com/advisories/18339Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.vupen.com/english/advisories/2006/4300VDB EntryX Refsource VUPENVendor Advisory
lists.suse.de/archive/suse-security-announce/2006-Feb/0008.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/18340Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22523Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/1246/referencesVDB EntryX Refsource VUPENVendor Advisory

Show all 66 references

www.securityfocus.com/archive/1/450315/100/0/threadedVendor AdvisoryX Refsource HP
marc.info?l=bugtraq&m=130497311408250&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/23260Third Party AdvisoryX Refsource SECUNIAVendor Advisory
rhn.redhat.com/errata/RHSA-2006-0159.htmlVendor AdvisoryX Refsource REDHATPatch
secunia.com/advisories/29849Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2006/3920VDB EntryX Refsource VUPEN
secunia.com/advisories/18333Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.ubuntulinux.org/usn/usn-241-1Vendor AdvisoryX Refsource UBUNTU
www.us-cert.gov/cas/techalerts/TA08-150A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/18307Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22368Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/445206/100/0/threadedVendor AdvisoryX Refsource HP
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2006-09/msg00016.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/archive/1/425399/100/0/threadedVendor AdvisoryX Refsource FEDORA
www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.htmlVendor AdvisoryX Refsource FEDORAPatch
www.vupen.com/english/advisories/2006/4868VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/30430Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2006/4207VDB EntryX Refsource VUPENVendor Advisory
lists.apple.com/archives/security-announce/2008//May/msg00001.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/21848Third Party AdvisoryX Refsource SECUNIAVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2006-250.htmX Refsource CONFIRM
secunia.com/advisories/18517Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/22669Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.trustix.org/errata/2005/0074/Vendor AdvisoryX Refsource TRUSTIXPatch
svn.apache.org/viewcvs?rev=358026&view=revX Refsource MISC
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11467VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/18585Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
issues.apache.org/bugzilla/show_bug.cgi?id=37791X Refsource CONFIRM
www.gentoo.org/security/en/glsa/glsa-200602-03.xmlVendor AdvisoryX Refsource GENTOOPatch
www.vupen.com/english/advisories/2008/1697VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/22233Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/19012Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18429Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-102640-1Vendor AdvisoryX Refsource SUNALERT
securitytracker.com/id?1015447VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2006/0056VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/18743Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/16152VDB EntryX Refsource BID
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
security-tracker.debian.org/tracker/CVE-2005-3357Advisory