Vulnerabilities > Apache SSL > Apache SSL > 1.3.34.1.57
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-04-04 | CVE-2008-0555 | Improper Input Validation vulnerability in Apache-Ssl 1.3.341.57 The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguished Name (DN) in a client certificate, which might allow remote attackers to bypass authentication via a crafted DN that triggers overwriting of environment variables. | 7.5 |