QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2002-0653

Back to search

CVE-2002-0653

Published: Apr 2, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2002:164
vendor-advisory
x_refsource_REDHAT
apache-modssl-htaccess-bo(9415)
vdb-entry
x_refsource_XF
RHSA-2003:106
vendor-advisory
x_refsource_REDHAT
CLA-2002:504
vendor-advisory
x_refsource_CONECTIVA
MDKSA-2002:048
vendor-advisory
x_refsource_MANDRAKE
SuSE-SA:2002:028
vendor-advisory
x_refsource_SUSE
RHSA-2002:134
vendor-advisory
x_refsource_REDHAT
RHSA-2002:136
vendor-advisory
x_refsource_REDHAT
20020622 Another flaw in Apache?
mailing-list
x_refsource_VULN-DEV
20020628 TSL-2002-0058 - apache/mod_ssl
mailing-list
x_refsource_BUGTRAQ
5084
vdb-entry
x_refsource_BID
RHSA-2002:135
vendor-advisory
x_refsource_REDHAT
RHSA-2002:146
vendor-advisory
x_refsource_REDHAT
HPSBTL0207-052
vendor-advisory
x_refsource_HP
DSA-135
vendor-advisory
x_refsource_DEBIAN
ESA-20020702-017
vendor-advisory
x_refsource_ENGARDE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now