Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2002-0843
HistoryOct 11, 2002 - 4:00 a.m.

CVE-2002-0843

2002-10-1104:00:00
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.7%

JSON

Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response.

Affected configurations

NVD
Node
apachehttp_serverMatch1.3
OR
apachehttp_serverMatch1.3.1
OR
apachehttp_serverMatch1.3.3
OR
apachehttp_serverMatch1.3.4
OR
apachehttp_serverMatch1.3.6
OR
apachehttp_serverMatch1.3.9
OR
apachehttp_serverMatch1.3.11
OR
apachehttp_serverMatch1.3.12
OR
apachehttp_serverMatch1.3.14
OR
apachehttp_serverMatch1.3.17
OR
apachehttp_serverMatch1.3.18
OR
apachehttp_serverMatch1.3.19
OR
apachehttp_serverMatch1.3.20
OR
apachehttp_serverMatch1.3.22
OR
apachehttp_serverMatch1.3.23
OR
apachehttp_serverMatch1.3.24
OR
apachehttp_serverMatch1.3.25
OR
apachehttp_serverMatch1.3.26
OR
oracleapplication_serverMatch1.0.2
OR
oracleapplication_serverMatch1.0.2.1s
OR
oracleapplication_serverMatch1.0.2.2
OR
oracleapplication_serverMatch9.0.2
OR
oracleapplication_serverMatch9.0.2r2
OR
oracleapplication_serverMatch9.0.2.1
OR
oracledatabase_serverMatch8.1.7
OR
oracledatabase_serverMatch9.2.2
OR
oracleoracle8iMatch8.1.7
OR
oracleoracle8iMatch8.1.7.0.0_enterprise
OR
oracleoracle8iMatch8.1.7.1
OR
oracleoracle8iMatch8.1.7.1.0_enterprise

References

Related

cvelist 1
cve 1
ubuntucve 1
httpd 1
altlinux 3
nessus 12
cert 1
openvas 8
redhat 1
osv 3
debian 6
cvelist
cvelist
CVE-2002-0843
2002-10-05 04:00:00
cve
cve
CVE-2002-0843
2002-10-11 04:00:00
ubuntucve
ubuntucve
CVE-2002-0843
2002-10-11 00:00:00
httpd
httpd
Apache Httpd < 1.3.27 : Buffer overflows in ab utility
2002-09-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.0.40-9
2002-10-02 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.0.40-9
2002-10-02 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.0.40-9
2002-10-02 00:00:00
nessus
nessus
Apache < 1.3.27 Multiple Vulnerabilities (DoS, XSS)
2002-10-04 00:00:00
Mandrake Linux Security Advisory : apache (MDKSA-2002:068)
2004-07-31 00:00:00
HP-UX PHSS_28111 : HP-UX Running Apache, Increased Privileges or Denial of Service (DoS) or Execution of Arbitrary Code (HPSBUX00224 SSRT2393 rev.3)
2005-03-18 00:00:00
cert
cert
Apache discloses source code via POST requests to a location with WebDAV and CGI enabled
2002-10-29 00:00:00
openvas
openvas
HP-UX Update for Apache HPSBUX00224
2009-05-05 00:00:00
HP-UX Update for Apache HPSBUX00224
2009-05-05 00:00:00
Debian Security Advisory DSA 195-1 (apache-perl)
2008-01-17 00:00:00
redhat
redhat
(RHSA-2002:251) apache security update
2003-02-06 00:00:00
osv
osv
apache-ssl - several vulnerabilities
2002-11-05 00:00:00
apache-perl - several vulnerabilities
2002-11-13 00:00:00
apache - several vulnerabilities
2002-11-04 00:00:00
debian
debian
[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities
2002-11-05 14:55:02
[SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities
2002-11-13 15:33:30
[SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities
2002-11-13 15:33:30

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.7%

JSON
Related for NVD:CVE-2002-0843
cvelist1cve1ubuntucve1httpd1altlinux3nessus12cert1openvas8redhat1osv3debian6