Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-4ujr-2afv-73cy
Summary
Improper Restriction of Operations within the Bounds of a Memory Buffer
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
Aliases
0
alias CVE-2002-2272
1
alias GHSA-pqr5-9v2j-44xg
Fixed_packages
Affected_packages
0
url pkg:maven/org.apache.tomcat/tomcat@4.0.0
purl pkg:maven/org.apache.tomcat/tomcat@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18j8-kwdv-dyak
1
vulnerability VCID-2fb2-r763-ybg5
2
vulnerability VCID-2jnv-segx-zkfd
3
vulnerability VCID-41ps-jy8t-cyfm
4
vulnerability VCID-4ujr-2afv-73cy
5
vulnerability VCID-6epr-2hbd-skcz
6
vulnerability VCID-87p8-zvvf-y7dm
7
vulnerability VCID-88v7-kc2y-bfd7
8
vulnerability VCID-99es-8ecb-uub8
9
vulnerability VCID-9y3t-7vfv-cbd2
10
vulnerability VCID-bhq7-d545-27bj
11
vulnerability VCID-gcgw-9fjy-nuap
12
vulnerability VCID-j2sv-62js-xbav
13
vulnerability VCID-p45v-qpgg-qqfj
14
vulnerability VCID-peya-mr7j-vugf
15
vulnerability VCID-q7jp-hn4a-4kec
16
vulnerability VCID-qxkf-4ddv-j3b7
17
vulnerability VCID-r1bk-cqhx-ebc5
18
vulnerability VCID-ssnx-gz8e-87ab
19
vulnerability VCID-tcju-3rvu-wkht
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.0.0
1
url pkg:maven/org.apache.tomcat/tomcat@4.1.12
purl pkg:maven/org.apache.tomcat/tomcat@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ujr-2afv-73cy
1
vulnerability VCID-j2sv-62js-xbav
2
vulnerability VCID-ssnx-gz8e-87ab
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.1.12
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2002-2272
reference_id
reference_type
scores
0
value 0.31421
scoring_system epss
scoring_elements 0.96831
published_at 2026-05-14T12:55:00Z
1
value 0.31421
scoring_system epss
scoring_elements 0.96805
published_at 2026-05-05T12:55:00Z
2
value 0.31421
scoring_system epss
scoring_elements 0.96809
published_at 2026-05-07T12:55:00Z
3
value 0.31421
scoring_system epss
scoring_elements 0.96814
published_at 2026-05-09T12:55:00Z
4
value 0.31421
scoring_system epss
scoring_elements 0.96816
published_at 2026-05-11T12:55:00Z
5
value 0.31421
scoring_system epss
scoring_elements 0.96821
published_at 2026-05-12T12:55:00Z
6
value 0.31421
scoring_system epss
scoring_elements 0.9675
published_at 2026-04-01T12:55:00Z
7
value 0.31421
scoring_system epss
scoring_elements 0.9676
published_at 2026-04-02T12:55:00Z
8
value 0.31421
scoring_system epss
scoring_elements 0.96761
published_at 2026-04-04T12:55:00Z
9
value 0.31421
scoring_system epss
scoring_elements 0.96766
published_at 2026-04-07T12:55:00Z
10
value 0.31421
scoring_system epss
scoring_elements 0.96774
published_at 2026-04-09T12:55:00Z
11
value 0.31421
scoring_system epss
scoring_elements 0.96777
published_at 2026-04-12T12:55:00Z
12
value 0.31421
scoring_system epss
scoring_elements 0.9678
published_at 2026-04-13T12:55:00Z
13
value 0.31421
scoring_system epss
scoring_elements 0.96786
published_at 2026-04-16T12:55:00Z
14
value 0.31421
scoring_system epss
scoring_elements 0.9679
published_at 2026-04-18T12:55:00Z
15
value 0.31421
scoring_system epss
scoring_elements 0.96793
published_at 2026-04-21T12:55:00Z
16
value 0.31421
scoring_system epss
scoring_elements 0.96792
published_at 2026-04-24T12:55:00Z
17
value 0.31421
scoring_system epss
scoring_elements 0.96794
published_at 2026-04-26T12:55:00Z
18
value 0.31421
scoring_system epss
scoring_elements 0.96796
published_at 2026-04-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2002-2272
1
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/10771
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/10771
2
reference_url https://web.archive.org/web/20030501051114/http://www.securityfocus.com/bid/6320
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20030501051114/http://www.securityfocus.com/bid/6320
3
reference_url https://web.archive.org/web/20051124132812/http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20051124132812/http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2002-2272
reference_id CVE-2002-2272
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2002-2272
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/dos/22068.pl
reference_id CVE-2002-2272;OSVDB-7394
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/dos/22068.pl
6
reference_url https://www.securityfocus.com/bid/6320/info
reference_id CVE-2002-2272;OSVDB-7394
reference_type exploit
scores
url https://www.securityfocus.com/bid/6320/info
7
reference_url https://github.com/advisories/GHSA-pqr5-9v2j-44xg
reference_id GHSA-pqr5-9v2j-44xg
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pqr5-9v2j-44xg
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 119
name Improper Restriction of Operations within the Bounds of a Memory Buffer
description The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
2
cwe_id 707
name Improper Neutralization
description The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
0
date_added 2002-12-04
description Apache 1.3.x + Tomcat 4.0.x/4.1.x mod_jk - Chunked Encoding Denial of Service
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2002-12-04
exploit_type dos
platform unix
source_date_updated 2016-12-19
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/6320/info
Severity_range_score7.0 - 8.9
Exploitability2.0
Weighted_severity8.0
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-4ujr-2afv-73cy