PT-2003-1140 · Apache+1 · Mod Dav+1

Published 2003-03-03 · Updated 2016-10-18 · CVE-2002-0842

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mod dav versions in certain third party modifications (e.g. Oracle9i Application Server 9.0.2)

Description The issue allows remote attackers to execute arbitrary code via a destination URI that forces a "502 Bad Gateway" response. This response causes format string specifiers to be returned from dav lookup uri() in mod dav.c, which is then used in a call to ap log rerror().

Recommendations For mod dav versions in certain third party modifications (e.g. Oracle9i Application Server 9.0.2), consider disabling the logging of bad gateway messages as a temporary workaround until a patch is available. Restrict access to the dav lookup uri() function in mod dav.c to minimize the risk of exploitation. Avoid using the ap log rerror() function with untrusted input until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2002-0842

Affected Products

Oracle9I Application Server

Mod Dav

References · 13

• 🔥 http://kb.cert.org/vuls/id/849993 · Exploit
• http://otn.oracle.com/deploy/security/pdf/2003alert52.pdf · Vendor Advisory
• http://iss.net/security_center/static/11330.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0842 · Security Note
• http://nextgenss.com/advisories/ora-appservfmtst.txt · Note
• http://marc.info/?l=bugtraq&m=104559446010858&w=2 · Note
• http://marc.info/?l=bugtraq&m=104549708626309&w=2 · Note
• http://securityfocus.com/bid/6846 · Note
• http://ciac.org/ciac/bulletins/n-046.shtml · Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0076.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0842 · Note
• http://marc.info/?l=bugtraq&m=104560577227981&w=2 · Note
• http://cert.org/advisories/CA-2003-05.html · Note