CVE-2002-0843

Published: Oct 11, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response.

Affected (30)

Products: Apache: Http Server · Oracle: Application Server, Database Server, Oracle8i

1 product

3 products

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 1.3.11
Apache Http Server	Version 1.3.12
Apache Http Server	Version 1.3.14
Apache Http Server	Version 1.3.17
Apache Http Server	Version 1.3.18
Apache Http Server	Version 1.3.19
Apache Http Server	Version 1.3.1
Apache Http Server	Version 1.3.20
Apache Http Server	Version 1.3.22
Apache Http Server	Version 1.3.23
Apache Http Server	Version 1.3.24
Apache Http Server	Version 1.3.25
Apache Http Server	Version 1.3.26
Apache Http Server	Version 1.3.3
Apache Http Server	Version 1.3.4
Apache Http Server	Version 1.3.6
Apache Http Server	Version 1.3.9
Apache Http Server	Version 1.3
Oracle Application Server	Version 1.0.2.1s
Oracle Application Server	Version 1.0.2.2
Oracle Application Server	Version 1.0.2
Oracle Application Server	Version 9.0.2.1
Oracle Application Server	Version 9.0.2
Oracle Application Server	Version 9.0.2 r2
Oracle Database Server	Version 8.1.7
Oracle Database Server	Version 9.2.2
Oracle Oracle8i	Version 8.1.7.0.0_enterprise
Oracle Oracle8i	Version 8.1.7.1.0_enterprise
Oracle Oracle8i	Version 8.1.7.1
Oracle Oracle8i	Version 8.1.7

References (56)

ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2002-10/0229.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530

Source: cve@mitre.org

http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530

Source: cve@mitre.org

http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103376585508776&w=2

Source: cve@mitre.org

http://online.securityfocus.com/advisories/4617

Source: cve@mitre.org

http://secunia.com/advisories/21425

Source: cve@mitre.org

http://www-1.ibm.com/support/search.wss?rs=0&q=IY87070&apar=only

Source: cve@mitre.org

http://www.apacheweek.com/issues/02-10-04

Source: cve@mitre.org

Vendor Advisory

http://www.debian.org/security/2002/dsa-187

Source: cve@mitre.org

http://www.debian.org/security/2002/dsa-188

Source: cve@mitre.org

http://www.debian.org/security/2002/dsa-195

Source: cve@mitre.org

http://www.iss.net/security_center/static/10281.php

Source: cve@mitre.org

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php

Source: cve@mitre.org

http://www.linuxsecurity.com/advisories/other_advisory-2414.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/5887

Source: cve@mitre.org

http://www.securityfocus.com/bid/5995

Source: cve@mitre.org

http://www.securityfocus.com/bid/5996

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3263

Source: cve@mitre.org

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2871

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I (unsafe URL)