CVE-2002-0082 The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attack...
HighCVSS 7.5
EPSS 29.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache-ssl | = 1.40 | No fix listed |
| apache-ssl | = 1.41 | No fix listed |
| apache-ssl | = 1.42 | No fix listed |
| apache-ssl | = 1.44 | No fix listed |
| apache-ssl | = 1.45 | No fix listed |
| apache-ssl | = 1.46 | No fix listed |
| mod ssl | = 2.7.1 | No fix listed |
| mod ssl | = 2.8 | No fix listed |
| mod ssl | = 2.8.1 | No fix listed |
| mod ssl | = 2.8.2 | No fix listed |
| mod ssl | = 2.8.3 | No fix listed |
| mod ssl | = 2.8.4 | No fix listed |
| mod ssl | = 2.8.5 | No fix listed |
| mod ssl | = 2.8.6 | No fix listed |
References
- CLA-2002:465 vendor-advisory
- SSRT0817 vendor-advisory
- 20020301 Apache-SSL buffer overflow (fix available) mailing-list
- 20020304 Apache-SSL 1.3.22+1.47 - update to security fix mailing-list
- 20020227 mod_ssl Buffer Overflow Condition (Update Available) mailing-list
- packetstormsecurity.com
- www.apacheweek.com
- CSSA-2002-011.0 vendor-advisory
- DSA-120 vendor-advisory
- apache-modssl-bo(8308) patch vdb-entry vendor-advisory
- MDKSA-2002:020 vendor-advisory
- ESA-20020301-005 vendor-advisory
- RHSA-2002:041 vendor-advisory
- RHSA-2002:042 vendor-advisory
- RHSA-2002:045 vendor-advisory
- HPSBTL0203-031 vendor-advisory
- HPSBUX0204-190 vendor-advisory
- 4189 vdb-entry