CVE-2002-0061

🗓️ 02 Apr 2003 05:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 145 Views🌐 WEB

Apache for Win32 pre-1.3.24 and 2.0.x pre-2.0.34-beta exposes cmd execution via shell metacharacters

Reporter	Title	Published	Views	Family All 15
Tenable Nessus	Apache < 1.3.28 Multiple Vulnerabilities	30 Aug 200400:00	–	nessus
Tenable Nessus	Apache < 1.3.29 Multiple Vulnerabilities	30 Aug 200400:00	–	nessus
Tenable Nessus	Apache < 2.0.48 Multiple Vulnerabilities	30 Aug 200400:00	–	nessus
Tenable Nessus	Apache on Windows < 1.3.24 / 2.0.x < 2.0.34 DOS Batch File Arbitrary Command Execution	18 Apr 200200:00	–	nessus
Check Point Advisories	Apache Win32 DOS Batch File Arbitrary Command Execution - Ver2 (CVE-2002-0061)	31 Mar 201400:00	–	checkpoint_advisories
Cvelist	CVE-2002-0061	2 Apr 200305:00	–	cvelist
Apache Httpd	Apache Httpd < 1.3.24 : Win32 Apache Remote command execution	13 Feb 200200:00	–	httpd
NVD	CVE-2002-0061	21 Mar 200205:00	–	nvd
OpenVAS	Apache Remote Command Execution via .bat files	3 Nov 200500:00	–	openvas
OpenVAS	Apache HTTP Server Remote Command Execution via .bat files	3 Nov 200500:00	–	openvas

NVD

Node

apache http_serverRange2.0.0–2.0.34

Source	Link
securityfocus	www.securityfocus.com/bid/4335
iss	www.iss.net/security_center/static/8589.php
lists	www.lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
apacheweek	www.apacheweek.com/issues/02-03-29
marc	www.marc.info/
lists	www.lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E
online	www.online.securityfocus.com/archive/1/263927

Parameter	Position	Path	Description	CWE
\|copy+..\conf\httpd.conf+..\htdocs\httpd.conf	query param	cgi-bin/test-cgi.bat	Remote command execution via DOS batch file handling in Apache for Win32 (CAN-2002-0061).	CWE-78
\|echo+Foobar+>>+..\htdocs\index.html	query param	cgi-bin/test-cgi.bat	Remote command execution via DOS batch file handling in Apache for Win32 (CAN-2002-0061).	CWE-78
\|dir+c:+>..\htdocs\dir.txt	query param	cgi-bin/test-cgi.bat	Remote command execution via DOS batch file handling in Apache for Win32 (CAN-2002-0061).	CWE-78

16 Jun 2026 21:56Current

7.5High risk

Vulners AI Score7.5

CVSS 27.5

EPSS0.56701