CVE

Id
5230  
CVE No.
CVE-2002-0840  
Status
Entry  
Description
Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
27820 5230 CVE-2002-0840 BUGTRAQ:20021002 Apache 2 Cross-Site Scripting  View
27821 5230 CVE-2002-0840 URL:http://marc.info/?l=bugtraq&m=103357160425708&w=2  View
27822 5230 CVE-2002-0840 VULNWATCH:20021002 Apache 2 Cross-Site Scripting  View
27823 5230 CVE-2002-0840 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0003.html  View
27824 5230 CVE-2002-0840 CONFIRM:http://www.apacheweek.com/issues/02-10-04  View
27825 5230 CVE-2002-0840 CONFIRM:http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2  View
27826 5230 CVE-2002-0840 CONECTIVA:CLA-2002:530  View
27827 5230 CVE-2002-0840 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530  View
27828 5230 CVE-2002-0840 ENGARDE:ESA-20021007-024  View
27829 5230 CVE-2002-0840 URL:http://www.linuxsecurity.com/advisories/other_advisory-2414.html  View
27830 5230 CVE-2002-0840 MANDRAKE:MDKSA-2002:068  View
27831 5230 CVE-2002-0840 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php  View
27832 5230 CVE-2002-0840 DEBIAN:DSA-187  View
27833 5230 CVE-2002-0840 URL:http://www.debian.org/security/2002/dsa-187  View
27834 5230 CVE-2002-0840 DEBIAN:DSA-188  View
27835 5230 CVE-2002-0840 URL:http://www.debian.org/security/2002/dsa-188  View
27836 5230 CVE-2002-0840 DEBIAN:DSA-195  View
27837 5230 CVE-2002-0840 URL:http://www.debian.org/security/2002/dsa-195  View
27838 5230 CVE-2002-0840 HP:HPSBUX0210-224  View
27839 5230 CVE-2002-0840 URL:http://online.securityfocus.com/advisories/4617  View
27840 5230 CVE-2002-0840 BUGTRAQ:20021003 [OpenPKG-SA-2002.009] OpenPKG Security Advisory (apache)  View
27841 5230 CVE-2002-0840 URL:http://marc.info/?l=bugtraq&m=103376585508776&w=2  View
27842 5230 CVE-2002-0840 BUGTRAQ:20021017 TSLSA-2002-0069-apache  View
27843 5230 CVE-2002-0840 URL:http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html  View
27844 5230 CVE-2002-0840 REDHAT:RHSA-2002:222  View
27845 5230 CVE-2002-0840 URL:http://www.redhat.com/support/errata/RHSA-2002-222.html  View
27846 5230 CVE-2002-0840 REDHAT:RHSA-2002:243  View
27847 5230 CVE-2002-0840 URL:http://www.redhat.com/support/errata/RHSA-2002-243.html  View
27848 5230 CVE-2002-0840 REDHAT:RHSA-2002:244  View
27849 5230 CVE-2002-0840 URL:http://www.redhat.com/support/errata/RHSA-2002-244.html  View
27850 5230 CVE-2002-0840 REDHAT:RHSA-2002:248  View
27851 5230 CVE-2002-0840 URL:http://www.redhat.com/support/errata/RHSA-2002-248.html  View
27852 5230 CVE-2002-0840 REDHAT:RHSA-2002:251  View
27853 5230 CVE-2002-0840 URL:http://www.redhat.com/support/errata/RHSA-2002-251.html  View
27854 5230 CVE-2002-0840 REDHAT:RHSA-2003:106  View
27855 5230 CVE-2002-0840 URL:http://www.redhat.com/support/errata/RHSA-2003-106.html  View
27856 5230 CVE-2002-0840 SGI:20021105-02-I  View
27857 5230 CVE-2002-0840 URL:ftp://patches.sgi.com/support/free/security/advisories/20021105-02-I  View
27858 5230 CVE-2002-0840 CERT-VN:VU#240329  View
27859 5230 CVE-2002-0840 URL:http://www.kb.cert.org/vuls/id/240329  View
27860 5230 CVE-2002-0840 XF:apache-http-host-xss(10241)  View
27861 5230 CVE-2002-0840 URL:http://xforce.iss.net/xforce/xfdb/10241  View
27862 5230 CVE-2002-0840 BID:5847  View
27863 5230 CVE-2002-0840 URL:http://www.securityfocus.com/bid/5847  View
27864 5230 CVE-2002-0840 OSVDB:862  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63909 JVNDB-2002-000236 Apache HTTP Server のデフォルトエラーページにおけるクロスサイトスクリプティングの脆弱性 ------------ CVE-2002-0840 5230 6.8 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000236.html  View