CVE-2005-1268

Name of the Vulnerable Software and Affected Versions: Apache mod ssl (affected versions not specified)

Description: The issue is related to an off-by-one error in the mod ssl Certificate Revocation List (CRL) verification callback, which can cause a denial of service (child process crash) via a CRL that leads to a buffer overflow of one null byte. This can be exploited if the Apache server is configured to use a malicious certificate revocation list (CRL).

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.