Skip to content
OpenAdvisories
Unscored DSA-805-1 4 CVEs

apache2 - several

Published Sep 8, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 apache2 2.0.54-5

Vulnerabilities 4

  • Unscored —

    Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to u…

  • Unscored —
    CVE-2005-2088 EPSS 20%

    The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to…

  • Unscored —
    CVE-2005-2700 EPSS 31%

    ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configur…

  • Unscored —
    CVE-2005-2728 EPSS 11%

    The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumpt…