Advisory details:
apache_httpd / CVE-2002-0840
| Advisory ID | apache_httpd/CVE-2002-0840 |
| Aliases | |
| Summary | Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| apache_httpd | low |
| Reference id | Reference type | URL |
|---|---|---|
| CVE-2002-0840 | https://httpd.apache.org/security/json/CVE-2002-0840.json |
| Data source | Exploit-DB |
|---|---|
| Date added | Oct. 2, 2002 |
| Description | Apache 1.3/2.0.x - Server Side Include Cross-Site Scripting |
| Ransomware campaign use | Known |
| Source publication date | Oct. 2, 2002 |
| Exploit type | remote |
| Platform | multiple |
| Source update date | Oct. 10, 2012 |
| Source URL | https://www.securityfocus.com/bid/5847/info |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.