CVE-2005-3357

MEDIUM · CVSS 5.4 EPSS 24.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-12-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2005-3357

Severity

MEDIUM

CVSS

5.4

EPSS

24.29%

Apache

Original NVD Description

mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.