Lucene search
SAINT CorporationSAINT:B6E89161F5A85A6F227960760297B726HistoryMay 08, 2006 - 12:00 a.m.
Apache chunked encoding buffer overflow
2006-05-0800:00:00
SAINT Corporation
www.saintcorporation.com
124
0.753 High
EPSS
Percentile
98.2%
Added: 05/08/2006
CVE: CVE-2002-0392
BID: 5033
OSVDB: 838
Background
Apache web servers support chunked encoding, which is used by a web client to send data to the server in parts, or chunks.
Problem
A flaw in the calculation of the size of chunked encoding leads to a buffer overflow, allowing remote command execution.
Resolution
Upgrade to the latest version of Apache.
References
<http://www.cert.org/advisories/CA-2002-17.html>
Limitations
Due to the nature of this vulnerability, this exploit may not always be reliable.
Platforms
Windows
Related
nessus
nessus
HP-UX PHSS_33253 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)
2006-09-22 00:00:00
HP-UX PHSS_33256 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)
2006-09-22 00:00:00
Debian DSA-133-1 : apache-perl - remote DoS / exploit
2004-09-29 00:00:00
packetstorm
packetstorm
Apache Win32 Chunked Encoding
2009-11-26 00:00:00
saint
saint
Apache chunked encoding buffer overflow
2006-05-08 00:00:00
Apache chunked encoding buffer overflow
2006-05-08 00:00:00
Apache chunked encoding buffer overflow
2006-05-08 00:00:00
openvas
openvas
Debian Security Advisory DSA 131-1 (apache)
2008-01-17 00:00:00
Debian Security Advisory DSA 132-1 (apache-ssl)
2008-01-17 00:00:00
Debian Security Advisory DSA 132-1 (apache-ssl)
2008-01-17 00:00:00
securityvulns
securityvulns
Apache httpd: vulnerability with chunked encoding
2002-06-17 00:00:00
[security bulletin] HPSBMA02149 SSRT050968 rev.1 - HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS)
2006-09-14 00:00:00
RUS-CERT Advisory 2002-08:01: Incorrect integer overflow detection in C code
2002-08-08 00:00:00
f5
f5
K17213 : Apache vulnerability CVE-2002-0392
2015-09-01 00:00:00
SOL17213 - Apache vulnerability CVE-2002-0392
2015-09-01 00:00:00
cert
cert
Apache web servers fail to handle chunks with a negative size
2002-06-18 00:00:00
canvas
canvas
Immunity Canvas: APACHECHUNK_WIN32
2002-07-03 04:00:00
debian
debian
[SECURITY] [DSA-131-2] Apache chunk handling vulnerability, update
2002-06-19 00:00:00
[SECURITY] [DSA-131-1] Apache chunk handling vulnerability
2002-06-18 00:00:00
[SECURITY] [DSA-132-1] apache-ssl chunk handling vulnerability
2002-06-19 00:00:00
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
CVE-2002-0392
2003-04-02 05:00:00
nvd
nvd
CVE-2002-0392
2002-07-03 04:00:00
httpd
httpd
Apache Httpd < 1.3.26 : Apache Chunked encoding vulnerability
2002-05-27 00:00:00
Apache Httpd < 2.0.37 : Apache Chunked encoding vulnerability
2002-05-27 00:00:00
cve
cve
CVE-2002-0392
2003-04-02 05:00:00
suse
suse
buffer overflow in apache
2002-06-19 16:28:56
debiancve
debiancve
CVE-2002-0392
2003-04-02 05:00:00
slackware
slackware
SSA-2002-0626204548
2002-06-26 20:45:48