Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-bcmv-92ve-u7a2
SummaryA path-revealing exposure was present in multiview type map negotiation (such as the default error documents) where a module would report the full path of the typemapped .var file when multiple documents or no documents could be served. Additionally a path-revealing exposure in cgi/cgid when Apache fails to invoke a script. The modules would report "couldn't create child process /path-to-script/script.pl" revealing the full path of the script.
Aliases
0
alias CVE-2002-0654
Fixed_packages
0
url pkg:apache/httpd@2.0.40
purl pkg:apache/httpd@2.0.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-112d-h2a5-xbc4
1
vulnerability VCID-1bv2-mkj8-ubaz
2
vulnerability VCID-1nh6-77uc-xbak
3
vulnerability VCID-1v86-mmdn-z3fk
4
vulnerability VCID-3cea-3rkm-r7gs
5
vulnerability VCID-3m9y-maes-5ycp
6
vulnerability VCID-3wbg-bxvj-1kca
7
vulnerability VCID-4zzy-q5zp-jkgm
8
vulnerability VCID-56kt-8bg6-zbcj
9
vulnerability VCID-5yez-d5nj-q7eq
10
vulnerability VCID-6d43-sjqw-tbbp
11
vulnerability VCID-76s2-26cr-syd1
12
vulnerability VCID-7krj-8vat-3ydy
13
vulnerability VCID-95zk-suqh-j7e7
14
vulnerability VCID-9b9s-sz9t-rubp
15
vulnerability VCID-9xk2-as1c-7kd2
16
vulnerability VCID-a86d-f4nd-eqhh
17
vulnerability VCID-bfvg-u6sz-6qc6
18
vulnerability VCID-d4rc-pnv5-6uc8
19
vulnerability VCID-d66x-55ub-vkfw
20
vulnerability VCID-dqkp-f1my-dbg9
21
vulnerability VCID-en6m-ye18-97hk
22
vulnerability VCID-fn5k-e2jr-6ube
23
vulnerability VCID-fq9j-uewn-q7h7
24
vulnerability VCID-g1jc-8vza-u3ad
25
vulnerability VCID-g2pp-aahn-mfcd
26
vulnerability VCID-ggje-ade3-n3hg
27
vulnerability VCID-j3mb-97k1-uuh9
28
vulnerability VCID-kcwg-hswv-2uf7
29
vulnerability VCID-kgpj-aexq-7kah
30
vulnerability VCID-kkfv-4jd1-bqdm
31
vulnerability VCID-m8uk-byje-dqey
32
vulnerability VCID-nkgw-gs9g-ckft
33
vulnerability VCID-pdj3-4txb-vych
34
vulnerability VCID-prd8-51a5-pygj
35
vulnerability VCID-pufp-t6dh-xqhv
36
vulnerability VCID-qtav-hqnd-b7fa
37
vulnerability VCID-qufv-kta7-1feu
38
vulnerability VCID-rhhj-jhej-gfcj
39
vulnerability VCID-srxw-jjvr-p3d5
40
vulnerability VCID-ss79-kcpu-mqd5
41
vulnerability VCID-t3d9-1ebn-bbdx
42
vulnerability VCID-tbdg-kev6-5uep
43
vulnerability VCID-umuk-3n1q-3qet
44
vulnerability VCID-v2g6-h93b-euer
45
vulnerability VCID-vqs2-5x99-7qfd
46
vulnerability VCID-vud7-n4uk-2be8
47
vulnerability VCID-w18t-67us-kufe
48
vulnerability VCID-wycq-jwzz-q7hf
49
vulnerability VCID-y56e-kuj4-97f6
50
vulnerability VCID-y8nd-7h3r-7fh5
51
vulnerability VCID-yjqs-kszf-yka1
52
vulnerability VCID-ym93-sxb8-fkdm
53
vulnerability VCID-za9f-j42y-ukdp
54
vulnerability VCID-zkbr-1m2z-ufe7
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.0.40
1
url pkg:deb/debian/apache2@2.0.40?distro=trixie
purl pkg:deb/debian/apache2@2.0.40?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.0.40%3Fdistro=trixie
2
url pkg:deb/debian/apache2@2.4.62-1~deb11u1?distro=trixie
purl pkg:deb/debian/apache2@2.4.62-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.62-1~deb11u1%3Fdistro=trixie
3
url pkg:deb/debian/apache2@2.4.66-1~deb12u1?distro=trixie
purl pkg:deb/debian/apache2@2.4.66-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.66-1~deb12u1%3Fdistro=trixie
4
url pkg:deb/debian/apache2@2.4.66-1~deb13u2?distro=trixie
purl pkg:deb/debian/apache2@2.4.66-1~deb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.66-1~deb13u2%3Fdistro=trixie
5
url pkg:deb/debian/apache2@2.4.66-8?distro=trixie
purl pkg:deb/debian/apache2@2.4.66-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.66-8%3Fdistro=trixie
Affected_packages
0
url pkg:apache/httpd@2.0.39
purl pkg:apache/httpd@2.0.39
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-112d-h2a5-xbc4
1
vulnerability VCID-1bv2-mkj8-ubaz
2
vulnerability VCID-1nh6-77uc-xbak
3
vulnerability VCID-1v86-mmdn-z3fk
4
vulnerability VCID-3cea-3rkm-r7gs
5
vulnerability VCID-3m9y-maes-5ycp
6
vulnerability VCID-3wbg-bxvj-1kca
7
vulnerability VCID-4zzy-q5zp-jkgm
8
vulnerability VCID-56kt-8bg6-zbcj
9
vulnerability VCID-5yez-d5nj-q7eq
10
vulnerability VCID-6d43-sjqw-tbbp
11
vulnerability VCID-76s2-26cr-syd1
12
vulnerability VCID-7krj-8vat-3ydy
13
vulnerability VCID-95zk-suqh-j7e7
14
vulnerability VCID-9b9s-sz9t-rubp
15
vulnerability VCID-9xk2-as1c-7kd2
16
vulnerability VCID-a86d-f4nd-eqhh
17
vulnerability VCID-bcmv-92ve-u7a2
18
vulnerability VCID-bfvg-u6sz-6qc6
19
vulnerability VCID-cgqk-f3fx-sfe9
20
vulnerability VCID-d4rc-pnv5-6uc8
21
vulnerability VCID-d66x-55ub-vkfw
22
vulnerability VCID-dqkp-f1my-dbg9
23
vulnerability VCID-en6m-ye18-97hk
24
vulnerability VCID-fn5k-e2jr-6ube
25
vulnerability VCID-fq9j-uewn-q7h7
26
vulnerability VCID-g1jc-8vza-u3ad
27
vulnerability VCID-g2pp-aahn-mfcd
28
vulnerability VCID-ggje-ade3-n3hg
29
vulnerability VCID-j3mb-97k1-uuh9
30
vulnerability VCID-kcwg-hswv-2uf7
31
vulnerability VCID-kgpj-aexq-7kah
32
vulnerability VCID-kkfv-4jd1-bqdm
33
vulnerability VCID-m8uk-byje-dqey
34
vulnerability VCID-nkgw-gs9g-ckft
35
vulnerability VCID-pdj3-4txb-vych
36
vulnerability VCID-prd8-51a5-pygj
37
vulnerability VCID-pufp-t6dh-xqhv
38
vulnerability VCID-qtav-hqnd-b7fa
39
vulnerability VCID-qufv-kta7-1feu
40
vulnerability VCID-rhhj-jhej-gfcj
41
vulnerability VCID-srxw-jjvr-p3d5
42
vulnerability VCID-ss79-kcpu-mqd5
43
vulnerability VCID-t3d9-1ebn-bbdx
44
vulnerability VCID-tbdg-kev6-5uep
45
vulnerability VCID-umuk-3n1q-3qet
46
vulnerability VCID-v2g6-h93b-euer
47
vulnerability VCID-vqs2-5x99-7qfd
48
vulnerability VCID-vud7-n4uk-2be8
49
vulnerability VCID-wycq-jwzz-q7hf
50
vulnerability VCID-y56e-kuj4-97f6
51
vulnerability VCID-y8nd-7h3r-7fh5
52
vulnerability VCID-yjqs-kszf-yka1
53
vulnerability VCID-ym93-sxb8-fkdm
54
vulnerability VCID-za9f-j42y-ukdp
55
vulnerability VCID-zkbr-1m2z-ufe7
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.0.39
References
0
reference_url http://marc.info/?l=bugtraq&m=102951160411052&w=2
reference_id
reference_type
scores
url http://marc.info/?l=bugtraq&m=102951160411052&w=2
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2002-0654
reference_id
reference_type
scores
0
value 0.75041
scoring_system epss
scoring_elements 0.98874
published_at 2026-04-16T12:55:00Z
1
value 0.75041
scoring_system epss
scoring_elements 0.98871
published_at 2026-04-12T12:55:00Z
2
value 0.75041
scoring_system epss
scoring_elements 0.98872
published_at 2026-04-13T12:55:00Z
3
value 0.75041
scoring_system epss
scoring_elements 0.98862
published_at 2026-04-01T12:55:00Z
4
value 0.75041
scoring_system epss
scoring_elements 0.98864
published_at 2026-04-02T12:55:00Z
5
value 0.75041
scoring_system epss
scoring_elements 0.98865
published_at 2026-04-04T12:55:00Z
6
value 0.75041
scoring_system epss
scoring_elements 0.98867
published_at 2026-04-09T12:55:00Z
7
value 0.75041
scoring_system epss
scoring_elements 0.98869
published_at 2026-04-08T12:55:00Z
8
value 0.75041
scoring_system epss
scoring_elements 0.9887
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2002-0654
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0654
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0654
3
reference_url https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
4
reference_url https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
5
reference_url https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
6
reference_url https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E
7
reference_url https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
8
reference_url https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
13
reference_url http://www.apache.org/dist/httpd/CHANGES_2.0
reference_id
reference_type
scores
url http://www.apache.org/dist/httpd/CHANGES_2.0
14
reference_url http://www.iss.net/security_center/static/9875.php
reference_id
reference_type
scores
url http://www.iss.net/security_center/static/9875.php
15
reference_url http://www.iss.net/security_center/static/9876.php
reference_id
reference_type
scores
url http://www.iss.net/security_center/static/9876.php
16
reference_url http://www.securityfocus.com/bid/5485
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/5485
17
reference_url http://www.securityfocus.com/bid/5486
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/5486
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.28:beta:win32:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.28:beta:win32:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.28:beta:win32:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.32:beta:win32:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.32:beta:win32:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.32:beta:win32:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.34:beta:win32:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.34:beta:win32:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.34:beta:win32:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*
30
reference_url https://httpd.apache.org/security/json/CVE-2002-0654.json
reference_id CVE-2002-0654
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2002-0654.json
31
reference_url https://nvd.nist.gov/vuln/detail/CVE-2002-0654
reference_id CVE-2002-0654
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2002-0654
32
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/21719.txt
reference_id CVE-2002-0654;OSVDB-4075
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/21719.txt
33
reference_url https://www.securityfocus.com/bid/5485/info
reference_id CVE-2002-0654;OSVDB-4075
reference_type exploit
scores
url https://www.securityfocus.com/bid/5485/info
Weaknesses
Exploits
0
date_added 2002-08-16
description Apache 2.0 - Full Path Disclosure
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2002-08-16
exploit_type remote
platform windows
source_date_updated 2012-10-04
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/5485/info
Severity_range_score0.1 - 5.0
Exploitability2.0
Weighted_severity4.5
Risk_score9.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-bcmv-92ve-u7a2