CVE-2002-0839: High severity Apache HTTP Server vulnerability
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].lastrtime segments in the scoreboard.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0839?
CVE-2002-0839 is considered a high severity vulnerability due to its potential for denial of service and unauthorized process control.
How do I fix CVE-2002-0839?
To fix CVE-2002-0839, upgrade to Apache HTTP Server version 1.3.27 or later.
Who is affected by CVE-2002-0839?
CVE-2002-0839 affects Apache HTTP Server 1.3.x versions before 1.3.27, including related Debian Linux distributions.
What happens if CVE-2002-0839 is exploited?
If exploited, CVE-2002-0839 allows an attacker to send a SIGUSR1 signal to processes running as root, potentially causing a denial of service.
What specific versions of Apache are vulnerable to CVE-2002-0839?
Versions of Apache HTTP Server from 1.3.0 up to but not including 1.3.27 are vulnerable to CVE-2002-0839.