NVD

Id
79839  
Name
CVE-2002-0840  
Description
Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-10-11  
Modified Date
2016-10-17  
Seq
2002-0840  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
398189 79839 CVE-2002-0840 20021105-02-I  View
398190 79839 CVE-2002-0840 20021017 TSLSA-2002-0069-apache  View
398191 79839 CVE-2002-0840 20021002 Apache 2 Cross-Site Scripting  View
398192 79839 CVE-2002-0840 CLA-2002:530  View
398193 79839 CVE-2002-0840 http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2  View
398194 79839 CVE-2002-0840 20021002 Apache 2 Cross-Site Scripting  View
398195 79839 CVE-2002-0840 20021003 [OpenPKG-SA-2002.009] OpenPKG Security Advisory (apache)  View
398196 79839 CVE-2002-0840 HPSBUX0210-224  View
398197 79839 CVE-2002-0840 http://www.apacheweek.com/issues/02-10-04  View
398198 79839 CVE-2002-0840 DSA-187  View
398199 79839 CVE-2002-0840 DSA-188  View
398200 79839 CVE-2002-0840 DSA-195  View
398201 79839 CVE-2002-0840 VU#240329  View
398202 79839 CVE-2002-0840 MDKSA-2002:068  View
398203 79839 CVE-2002-0840 ESA-20021007-024  View
398204 79839 CVE-2002-0840 RHSA-2002:222  View
398205 79839 CVE-2002-0840 RHSA-2002:243  View
398206 79839 CVE-2002-0840 RHSA-2002:244  View
398207 79839 CVE-2002-0840 RHSA-2002:248  View
398208 79839 CVE-2002-0840 RHSA-2002:251  View
398209 79839 CVE-2002-0840 RHSA-2003:106  View
398210 79839 CVE-2002-0840 5847  View
398211 79839 CVE-2002-0840 apache-http-host-xss(10241)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63909 JVNDB-2002-000236 Apache HTTP Server のデフォルトエラーページにおけるクロスサイトスクリプティングの脆弱性 ------------ CVE-2002-0840 5230 CVE-2002-0840 79839 6.8 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000236.html 2002-10-02 2007-04-01 View