PT-2002-2984 · Apache · Apache+2

Publicado 2002-12-31 · Atualizado 2022-04-30 · CVE-2002-2272

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Apache versions 1.3 through 1.3.27 Tomcat versions 4.0 through 4.1.12

Description: The issue allows remote attackers to cause a denial of service via an HTTP GET request with a Transfer-Encoding chunked field containing invalid values, leading to desynchronized communications.

Recommendations: For Apache versions 1.3 through 1.3.27, consider updating the mod jk module to a version later than 1.2.1 as a fix. For Tomcat versions 4.0 through 4.1.12, update Tomcat to a version later than 4.1.12 to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2002-2272

GHSA-PQR5-9V2J-44XG

Produtos afetados

Apache

Apache Tomcat

Mod Jk

Referências · 9

• 🔥 https://exploit-db.com/exploits/22068 · Exploit
• 🔥 http://securityfocus.com/bid/6320 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-2272 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-pqr5-9v2j-44xg · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2272 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10771 · Nota
• https://web.archive.org/web/20051124132812/http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html · Nota
• https://web.archive.org/web/20030501051114/http://securityfocus.com/bid/6320 · Nota