CVE-2004-0885: Apache HTTP Server

High severity, CVSS 7.5. EPSS: 15.4% chance of exploitation in the next 30 days.

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

Affected products

• Apache HTTP Server: version 2.0.35 only; version 2.0.36 only; version 2.0.37 only; version 2.0.38 only; version 2.0.39 only; version 2.0.40 only; …

Published 2004-11-03. Last modified 2026-06-16.