NetSight
IP …
medium6.4

CVE-2003-0192

Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCi…

Impact

Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.

Affected products

VendorProductAffected versions
ApacheHttp Server
Versions 2.0, 2.0.28, 2.0.32, 2.0.35, 2.0.36, 2.0.37

References