NVD

Id
80149  
Name
CVE-2002-1157  
Description
Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-11-04  
Modified Date
2008-09-05  
Seq
2002-1157  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399519 80149 CVE-2002-1157 20021026 GLSA: mod_ssl  View
399520 80149 CVE-2002-1157 CLA-2002:541  View
399521 80149 CVE-2002-1157 20021023 [OpenPKG-SA-2002.010] OpenPKG Security Advisory (apache)  View
399522 80149 CVE-2002-1157 DSA-181  View
399523 80149 CVE-2002-1157 apache-modssl-host-xss(10457)  View
399524 80149 CVE-2002-1157 MDKSA-2002:072  View
399525 80149 CVE-2002-1157 ESA-20021029-027  View
399526 80149 CVE-2002-1157 RHSA-2002:222  View
399527 80149 CVE-2002-1157 RHSA-2002:243  View
399528 80149 CVE-2002-1157 RHSA-2002:244  View
399529 80149 CVE-2002-1157 RHSA-2002:248  View
399530 80149 CVE-2002-1157 RHSA-2002:251  View
399531 80149 CVE-2002-1157 RHSA-2003:106  View
399532 80149 CVE-2002-1157 6029  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63912 JVNDB-2002-000239 Apache HTTP Server の mod_ssl におけるクロスサイトスクリプティングの脆弱性 ------------ CVE-2002-1157 5544 CVE-2002-1157 80149 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000239.html 2002-10-02 2007-04-01 View