CVE-2002-0653
- State
- Published
- Severity
- Not scored
- Published
- Apr 2, 2003
- Updated
- Aug 8, 2024
- Reserved
- Jul 2, 2002
Description
Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2002:164vendor-advisory
- apache-modssl-htaccess-bo(9415)vdb-entry
- RHSA-2003:106vendor-advisory
- CLA-2002:504vendor-advisory
- MDKSA-2002:048vendor-advisory
- SuSE-SA:2002:028vendor-advisory
- RHSA-2002:134vendor-advisory
- RHSA-2002:136vendor-advisory
- 20020622 Another flaw in Apache?mailing-list
- 20020628 TSL-2002-0058 - apache/mod_sslmailing-list
- 5084vdb-entry
- 20020624 Apache mod_ssl off-by-one vulnerabilitymailing-list
- RHSA-2002:135vendor-advisory
- RHSA-2002:146vendor-advisory
- HPSBTL0207-052vendor-advisory
- DSA-135vendor-advisory
- ESA-20020702-017vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.