CVE-2008-0555

HIGH 7.5CVE-2008-0555 · Published 04/04/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
apache-ssl apache-ssl	`= 1.3.34_1.57`	No fix yet

Description

The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguished Name (DN) in a client certificate, which might allow remote attackers to bypass authentication via a crafted DN that triggers overwriting of environment variables.

References

secunia.com/advisories/29644 · Vendor Advisory
securityreason.com/securityalert/3797
apache-ssl.org/advisory-cve-2008-0555.txt · Exploit
cynops.de/advisories/CVE-2008-0555.txt · Exploit
klink.name/security/aklink-sa-2008-005-apache-ssl.txt · Exploit
securityfocus.com/archive/1/490386/100/0/threaded
securityfocus.com/bid/28576 · Patch
securitytracker.com/id
vupen.com/english/advisories/2008/1079/references
exchange.xforce.ibmcloud.com/vulnerabilities/41618

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free