Advisory details:
apache_httpd / CVE-2002-0392
| Advisory ID | apache_httpd/CVE-2002-0392 |
| Aliases | |
| Summary | Malicious requests can cause various effects ranging from a relatively harmless increase in system resources through to denial of service attacks and in some cases the ability to execute arbitrary remote code. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| apache_httpd | critical |
| Reference id | Reference type | URL |
|---|---|---|
| CVE-2002-0392 | https://httpd.apache.org/security/json/CVE-2002-0392.json |
| Data source | Exploit-DB |
|---|---|
| Date added | June 17, 2002 |
| Description | Apache 1.x/2.0.x - Chunked-Encoding Memory Corruption (1) |
| Ransomware campaign use | Known |
| Source publication date | June 17, 2002 |
| Exploit type | remote |
| Platform | multiple |
| Source update date | Sept. 27, 2012 |
| Source URL | https://www.securityfocus.com/bid/5033/info |
| Data source | Metasploit |
|---|---|
| Description | This module exploits the chunked transfer integer wrap vulnerability in Apache version 1.2.x to 1.3.24. This particular module has been tested with all versions of the official Win32 build between 1.3.9 and 1.3.24. Additionally, it should work against most co-branded and bundled versions of Apache (Oracle 8i, 9i, IBM HTTPD, etc). You will need to use the Check() functionality to determine the exact target version prior to launching the exploit. The version of Apache bundled with Oracle 8.1.7 will not automatically restart, so if you use the wrong target value, the server will crash. |
| Note | Reliability: - unknown-reliability Stability: - unknown-stability SideEffects: - unknown-side-effects |
| Ransomware campaign use | Unknown |
| Source publication date | June 19, 2002 |
| Platform | Windows |
| Source URL | https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/http/apache_chunked.rb |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.