CVE-2005-1268

CVE-2005-1268 describes an off-by-one error in Apache's mod_ssl module, specifically within its Certificate Revocation List (CRL) verification callback, affecting Apache, Debian, and Red Hat distributions. This vulnerability allows remote attackers to trigger a denial of service by providing a specially crafted CRL that causes a one-byte buffer overflow, leading to a child process crash. With a CVSS score of 5.0, it is a network-exploitable vulnerability with low attack complexity, requiring no authentication, and resulting in partial availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.