CVE-2002-0653 Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the....
HighCVSS 7.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| modssl mod ssl | <= 2.8.9 | No fix listed |
References
- 20020628 TSL-2002-0058 - apache/mod_ssl broken-link mailing-list
- HPSBTL0207-052 broken-link vendor-advisory
- CLA-2002:504 broken-link vendor-advisory
- 20020624 Apache mod_ssl off-by-one vulnerability mailing-list
- ESA-20020702-017 mailing-list patch vendor-advisory
- 20020622 Another flaw in Apache? mailing-list
- RHSA-2002:164 broken-link vendor-advisory
- DSA-135 broken-link vendor-advisory
- apache-modssl-htaccess-bo(9415) broken-link vdb-entry
- MDKSA-2002:048 broken-link vendor-advisory
- SuSE-SA:2002:028 broken-link vendor-advisory
- RHSA-2002:134 broken-link vendor-advisory
- RHSA-2002:135 broken-link vendor-advisory
- RHSA-2002:136 broken-link vendor-advisory
- RHSA-2002:146 broken-link vendor-advisory
- RHSA-2003:106 broken-link vendor-advisory
- 5084 broken-link third-party-advisory vdb-entry