CVE-2004-0885

CVE-2004-0885 describes a vulnerability in Apache HTTP Server's mod_ssl module, specifically affecting versions 2.0.35 through 2.0.52. When the "SSLCipherSuite" directive is used within directory or location contexts, remote clients can bypass intended cipher suite restrictions. This vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.