CVE-2002-1233
- State
- Published
- Severity
- Not scored
- Published
- Oct 25, 2002
- Updated
- Aug 8, 2024
- Reserved
- Oct 22, 2002
Description
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-188vendor-advisory
- 5990vdb-entry
- DSA-187vendor-advisory
- 5981vdb-entry
- DSA-195vendor-advisory
- apache-htdigest-tmpfile-race(10413)vdb-entry
- 20021016 Apache 1.3.26mailing-list
- apache-htpasswd-tmpfile-race(10412)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.