PT-2002-2515 · Hewlett Packard+1 · Hp-Ux+3

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1793

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP-UX 11.04 with Virtualvault OS (VVOS) versions 4.5 through 4.6

Description The issue occurs when the Apache server times out during an SSL request, causing the HTTP Server mod ssl module to close the connection. This may allow attackers to cause a denial of service.

Recommendations For HP-UX 11.04 with Virtualvault OS (VVOS) versions 4.5 through 4.6, consider configuring the Apache server to handle timeouts differently to minimize the risk of denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1793

Produtos afetados

Apache Http Server

Hp-Ux

Virtualvault

Mod Ssl

Referências · 4

• http://online.securityfocus.com/advisories/4502 · Aviso do Fabricante
• http://iss.net/security_center/static/10206.php · Correção
• http://securityfocus.com/bid/5791 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-1793 · Nota de Segurança