CVE-2002-0843
NoneCVSS
—
EPSS
21.4%
Published
Oct 11, 2002
CISA due date
—
The record
Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.0 | apache | 0 | 1.3.26-0woody |
| Debian:3.0 | apache-perl | 0 | 1.3.26-1-1.26-0woody2 |
| Debian:3.0 | apache-ssl | 0 | 1.3.26.1+1.48-0woody3 |
Related vulnerabilities
- CVE-2005-2088 The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP… Also affects apache
- CVE-2004-0492 Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31… Also affects apache
- CVE-2002-0840 Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before… Also affects apache