PublicDate: 2005-08-05 04:00:00 UTC Candidate: CVE-2005-1268 References: https://ubuntu.com/security/notices/USN-160-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1268 Description: Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_apache2: released (2.0.55-4ubuntu2.2) edgy_apache2: released (2.0.55-4ubuntu4.1) feisty_apache2: released (2.2.3-3.2ubuntu0.1) devel_apache2: released (2.2.4-3) upstream_apache2: needs-triage