CVE-2002-0392
HIGH 7.5EPSS 94.9%
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 94.91% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2003-04-02
- Updated
- 2024-08-08
Proof-of-concept exploits (1)
Metasploit modules (1)
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/21560
- https://www.exploit-db.com/exploits/21559
- https://www.exploit-db.com/exploits/16782
Security advisories
- http://httpd.apache.org/info/security_bulletin_20020617.txt
- http://online.securityfocus.com/advisories/4240
- http://online.securityfocus.com/advisories/4257
- http://secunia.com/advisories/21917
- http://www.cert.org/advisories/CA-2002-17.html
- http://www.debian.org/security/2002/dsa-131
- http://www.debian.org/security/2002/dsa-132
- http://www.debian.org/security/2002/dsa-133
- http://www.frsirt.com/english/advisories/2006/3598
- http://www.kb.cert.org/vuls/id/944335
- http://www.linuxsecurity.com/advisories/other_advisory-2137.html
- http://www.redhat.com/support/errata/RHSA-2002-126.html
- http://www.redhat.com/support/errata/RHSA-2002-150.html
- http://www.redhat.com/support/errata/RHSA-2003-106.html
- http://www.securityfocus.com/bid/20005
- http://www.securityfocus.com/bid/5033