PT-2002-2149 · Apache · Apache+1

Publicado 2002-10-03 · Atualizado 2021-06-06 · CVE-2002-1156

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Apache version 2.0.42

Description: The issue allows remote attackers to view the source code of a CGI script. This occurs when a POST request is made to a directory where both WebDAV and CGI are enabled.

Recommendations: For Apache version 2.0.42, consider disabling WebDAV or CGI in locations where both are currently enabled to prevent the source code of CGI scripts from being revealed to remote users.

Correção

Identificadores relacionados

CVE-2002-1156

Produtos afetados

Apache

Apache Http Server

Referências · 23

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1156 · Nota
• https://httpd.apache.org/security/vulnerabilities_20.html#CVE-2002-1156 · Nota
• http://securityfocus.com/bid/6065 · Nota
• https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E · Nota
• http://kb.cert.org/vuls/id/910713 · Nota
• http://online.securityfocus.com/advisories/4617 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1156 · Nota de Segurança
• https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1156 · Aviso do Fabricante
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E · Nota
• https://osv.dev/vulnerability/CVE-2002-1156 · Aviso do Fabricante
• https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E · Nota