PT-2002-1857 · Apache · Apache+1

Published 2002-10-03 · Updated 2021-06-06 · CVE-2002-0843

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Apache versions prior to 1.3.27 Apache 2.x versions prior to 2.0.43

Description: The issue is related to buffer overflows in the ApacheBench benchmark support program, which can be exploited by a malicious web server. This could lead to a denial of service and potentially allow the execution of arbitrary code if the ApacheBench tool is run against a malicious server.

Recommendations: For Apache versions prior to 1.3.27, update to version 1.3.27 or later. For Apache 2.x versions prior to 2.0.43, update to version 2.0.43 or later.

Fix

Related Identifiers

CVE-2002-0843

DSA-187

DSA-188

DSA-195

Affected Products

Apache

Apache Http Server

References · 31

• http://online.securityfocus.com/advisories/4617 · Vendor Advisory
• http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530 · Vendor Advisory
• http://debian.org/security/2002/dsa-195 · Vendor Advisory
• http://linuxsecurity.com/advisories/other_advisory-2414.html · Vendor Advisory
• http://debian.org/security/2002/dsa-188 · Vendor Advisory
• http://debian.org/security/2002/dsa-187 · Vendor Advisory
• http://linux-mandrake.com/en/security/2002/MDKSA-2002-068.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0843 · Security Note
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY87070&apar=only · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530 · Vendor Advisory
• http://apacheweek.com/issues/02-10-04 · Vendor Advisory
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E · Note
• http://securityfocus.com/bid/5887 · Note
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E · Note