PT-2002-2149 · Apache · Apache+1

Published 2002-10-03 · Updated 2021-06-06 · CVE-2002-1156

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Apache version 2.0.42

Description: The issue allows remote attackers to view the source code of a CGI script. This occurs when a POST request is made to a directory where both WebDAV and CGI are enabled.

Recommendations: For Apache version 2.0.42, consider disabling WebDAV or CGI in locations where both are currently enabled to prevent the source code of CGI scripts from being revealed to remote users.

Fix

Related Identifiers

CVE-2002-1156

Affected Products

Apache

Apache Http Server

References · 23

• http://online.securityfocus.com/advisories/4617 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1156 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1156 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-1156 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2002-1156 · Vendor Advisory
• http://apacheweek.com/issues/02-10-04 · Vendor Advisory
• http://apache.org/dist/httpd/CHANGES_2.0 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1156 · Note
• https://httpd.apache.org/security/vulnerabilities_20.html#CVE-2002-1156 · Note
• http://securityfocus.com/bid/6065 · Note
• https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E · Note
• https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E · Note
• http://kb.cert.org/vuls/id/910713 · Note
• https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E · Note
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E · Note