CVE-2002-0653: Buffer Overflow
Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0653?
CVE-2002-0653 has a high severity due to its potential to allow local users to execute arbitrary code as the Apache server user.
How do I fix CVE-2002-0653?
To fix CVE-2002-0653, you should upgrade to mod_ssl version 2.8.10 or later, which addresses this vulnerability.
Who is affected by CVE-2002-0653?
All local users with access to .htaccess files in environments using mod_ssl version 2.8.9 and earlier are affected by CVE-2002-0653.
What kind of attack vector does CVE-2002-0653 utilize?
CVE-2002-0653 exploits an off-by-one buffer overflow through the ssl_compat_directive function in mod_ssl.
Can CVE-2002-0653 be exploited remotely?
CVE-2002-0653 is primarily a local vulnerability, requiring local user access to exploit, rather than being remotely exploitable.