PT-2002-2515 · Hewlett Packard+1 · Hp-Ux+3

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1793

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP-UX 11.04 with Virtualvault OS (VVOS) versions 4.5 through 4.6

Description The issue occurs when the Apache server times out during an SSL request, causing the HTTP Server mod ssl module to close the connection. This may allow attackers to cause a denial of service.

Recommendations For HP-UX 11.04 with Virtualvault OS (VVOS) versions 4.5 through 4.6, consider configuring the Apache server to handle timeouts differently to minimize the risk of denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1793

Affected Products

Apache Http Server

Hp-Ux

Virtualvault

Mod Ssl

References · 4

• http://online.securityfocus.com/advisories/4502 · Vendor Advisory
• http://iss.net/security_center/static/10206.php · Patch
• http://securityfocus.com/bid/5791 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-1793 · Security Note