http://www.securityfocus.com/advisories/6785 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488 patch: http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/ssl/ssl_engine_kernel.c?r1=1.105&r2=1.106
german advisory regarding both apache1- and apache2-mod_ssl: http://CERT.Uni-Stuttgart.DE/ticker/article.php?mid=1205
*** This bug has been marked as a duplicate of 51368 ***