CVE

Id
5233  
CVE No.
CVE-2002-0843  
Status
Candidate  
Description
Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response.  
Phase
Modified (20071016)  
Votes
ACCEPT(3) Armstrong, Cole, Green | MODIFY(1) Cox | NOOP(1) Christey  
Comments
Christey> CONFIRM:http://www.info.apple.com/usen/security/security_updates.html | Cox> Support inclusion decision: a user may well run ApacheBench against | their own server in a DMZ that has been compromised therefore leading | to a break across security zones. | Addref: RHSA-2002:251 | Addref: RHSA-2002:248 | Addref: RHSA-2002:244 | Addref: RHSA-2002:243 | Addref: RHSA-2002:222 | Change Apache Week ref to: http://www.apacheweek.com/issues/02-10-04#security | Christey> SGI:20021105-02-I | URL:ftp://patches.sgi.com/support/free/security/advisories/20021105-02-I | Christey> BUGTRAQ:20021016 Apache 1.3.26 | URL:http://archives.neohapsis.com/archives/bugtraq/2002-10/0229.html | XF:apache-apachebench-response-bo(10281) | URL:http://www.iss.net/security_center/static/10281.php | BID:5996 | URL:http://www.securityfocus.com/bid/5996  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
27887 5233 CVE-2002-0843 BUGTRAQ:20021016 Apache 1.3.26  View
27888 5233 CVE-2002-0843 URL:http://archives.neohapsis.com/archives/bugtraq/2002-10/0229.html  View
27889 5233 CVE-2002-0843 CONFIRM:http://www.apacheweek.com/issues/02-10-04  View
27890 5233 CVE-2002-0843 CONFIRM:http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2  View
27891 5233 CVE-2002-0843 CONFIRM:http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2871  View
27892 5233 CVE-2002-0843 AIXAPAR:IY87070  View
27893 5233 CVE-2002-0843 URL:http://www-1.ibm.com/support/search.wss?rs=0&q=IY87070&apar=only  View
27894 5233 CVE-2002-0843 CONECTIVA:CLA-2002:530  View
27895 5233 CVE-2002-0843 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530  View
27896 5233 CVE-2002-0843 CONECTIVA:000530  View
27897 5233 CVE-2002-0843 URL:http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530  View
27898 5233 CVE-2002-0843 CONECTIVA:CLSA-2002:530  View
27899 5233 CVE-2002-0843 URL:http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530  View
27900 5233 CVE-2002-0843 ENGARDE:ESA-20021007-024  View
27901 5233 CVE-2002-0843 URL:http://www.linuxsecurity.com/advisories/other_advisory-2414.html  View
27902 5233 CVE-2002-0843 MANDRAKE:MDKSA-2002:068  View
27903 5233 CVE-2002-0843 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php  View
27904 5233 CVE-2002-0843 DEBIAN:DSA-187  View
27905 5233 CVE-2002-0843 URL:http://www.debian.org/security/2002/dsa-187  View
27906 5233 CVE-2002-0843 DEBIAN:DSA-188  View
27907 5233 CVE-2002-0843 URL:http://www.debian.org/security/2002/dsa-188  View
27908 5233 CVE-2002-0843 DEBIAN:DSA-195  View
27909 5233 CVE-2002-0843 URL:http://www.debian.org/security/2002/dsa-195  View
27910 5233 CVE-2002-0843 HP:HPSBUX0210-224  View
27911 5233 CVE-2002-0843 URL:http://online.securityfocus.com/advisories/4617  View
27912 5233 CVE-2002-0843 SGI:20021105-01-I  View
27913 5233 CVE-2002-0843 URL:ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I  View
27914 5233 CVE-2002-0843 BUGTRAQ:20021003 [OpenPKG-SA-2002.009] OpenPKG Security Advisory (apache)  View
27915 5233 CVE-2002-0843 URL:http://marc.info/?l=bugtraq&m=103376585508776&w=2  View
27916 5233 CVE-2002-0843 BUGTRAQ:20021017 TSLSA-2002-0069-apache  View
27917 5233 CVE-2002-0843 URL:http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html  View
27918 5233 CVE-2002-0843 BID:5995  View
27919 5233 CVE-2002-0843 URL:http://www.securityfocus.com/bid/5995  View
27920 5233 CVE-2002-0843 BID:5996  View
27921 5233 CVE-2002-0843 URL:http://www.securityfocus.com/bid/5996  View
27922 5233 CVE-2002-0843 BID:5887  View
27923 5233 CVE-2002-0843 URL:http://www.securityfocus.com/bid/5887  View
27924 5233 CVE-2002-0843 VUPEN:ADV-2006-3263  View
27925 5233 CVE-2002-0843 URL:http://www.vupen.com/english/advisories/2006/3263  View
27926 5233 CVE-2002-0843 SECUNIA:21425  View
27927 5233 CVE-2002-0843 URL:http://secunia.com/advisories/21425  View
27928 5233 CVE-2002-0843 XF:apache-apachebench-response-bo(10281)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63915 JVNDB-2002-000242 Apache Bench におけるバッファオーバーフローの脆弱性 Apache HTTP Server において、ベンチマークテストを行う為のツール Apache Bench (ab) には、テスト対象のサーバから取得する "Server Software:" の文字列長に対するチェックが不適切であるため、異常に長い文字列を設定することによりバッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0843 5233 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000242.html  View