info
discussion
exploit
solution
references
Apache-SSL Client Certificate Forging Vulnerability
There is no exploit required.
Privacy Statement
Copyright 2010, SecurityFocus