CVE

Id
5229  
CVE No.
CVE-2002-0839  
Status
Candidate  
Description
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.  
Phase
Modified (20110830)  
Votes
ACCEPT(3) Armstrong, Cole, Green | MODIFY(1) Cox | NOOP(1) Christey  
Comments
Christey> CONFIRM:http://www.info.apple.com/usen/security/security_updates.html | Cox> Addref: RHSA-2002:251 | Addref: RHSA-2002:248 | Addref: RHSA-2002:244 | Addref: RHSA-2002:243 | Addref: RHSA-2002:222 | Change Apache Week ref to: http://www.apacheweek.com/issues/02-10-04#security | Christey> SGI:20021105-02-I | URL:ftp://patches.sgi.com/support/free/security/advisories/20021105-02-I  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
27787 5229 CVE-2002-0839 VULNWATCH:20021003 iDEFENSE Security Advisory 10.03.2002: Apache 1.3.x shared memory scoreboard vulnerabilities  View
27788 5229 CVE-2002-0839 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0012.html  View
27789 5229 CVE-2002-0839 CONFIRM:http://www.apacheweek.com/issues/02-10-04  View
27790 5229 CVE-2002-0839 CONFIRM:http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2  View
27791 5229 CVE-2002-0839 CONECTIVA:CLA-2002:530  View
27792 5229 CVE-2002-0839 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530  View
27793 5229 CVE-2002-0839 ENGARDE:ESA-20021007-024  View
27794 5229 CVE-2002-0839 URL:http://www.linuxsecurity.com/advisories/other_advisory-2414.html  View
27795 5229 CVE-2002-0839 HP:HPSBOV02683  View
27796 5229 CVE-2002-0839 URL:http://marc.info/?l=bugtraq&m=130497311408250&w=2  View
27797 5229 CVE-2002-0839 HP:SSRT090208  View
27798 5229 CVE-2002-0839 URL:http://marc.info/?l=bugtraq&m=130497311408250&w=2  View
27799 5229 CVE-2002-0839 MANDRAKE:MDKSA-2002:068  View
27800 5229 CVE-2002-0839 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php  View
27801 5229 CVE-2002-0839 DEBIAN:DSA-187  View
27802 5229 CVE-2002-0839 URL:http://www.debian.org/security/2002/dsa-187  View
27803 5229 CVE-2002-0839 DEBIAN:DSA-188  View
27804 5229 CVE-2002-0839 URL:http://www.debian.org/security/2002/dsa-188  View
27805 5229 CVE-2002-0839 DEBIAN:DSA-195  View
27806 5229 CVE-2002-0839 URL:http://www.debian.org/security/2002/dsa-195  View
27807 5229 CVE-2002-0839 BUGTRAQ:20021003 [OpenPKG-SA-2002.009] OpenPKG Security Advisory (apache)  View
27808 5229 CVE-2002-0839 URL:http://marc.info/?l=bugtraq&m=103376585508776&w=2  View
27809 5229 CVE-2002-0839 SGI:20021105-01-I  View
27810 5229 CVE-2002-0839 URL:ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I  View
27811 5229 CVE-2002-0839 HP:HPSBUX0210-224  View
27812 5229 CVE-2002-0839 URL:http://online.securityfocus.com/advisories/4617  View
27813 5229 CVE-2002-0839 BUGTRAQ:20021015 GLSA: apache  View
27814 5229 CVE-2002-0839 URL:http://archives.neohapsis.com/archives/bugtraq/2002-10/0195.html  View
27815 5229 CVE-2002-0839 BUGTRAQ:20021017 TSLSA-2002-0069-apache  View
27816 5229 CVE-2002-0839 URL:http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html  View
27817 5229 CVE-2002-0839 BID:5884  View
27818 5229 CVE-2002-0839 URL:http://www.securityfocus.com/bid/5884  View
27819 5229 CVE-2002-0839 XF:apache-scorecard-memory-overwrite(10280)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63917 JVNDB-2002-000244 Apache HTTP Server の 共有メモリスコアボードにおけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server において、null で "スコアボード" を継続的に埋め尽くし、サーバに子プロセスを生成させ続けることで、システムがサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2002-0839 5229 7.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000244.html  View