CVE-2002-1156: Medium severity apache http server vulnerability
Published Oct 11, 2002
·Updated
Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled.
Affected Software
1 affected component
Apache HTTP Server=2.0.42
Event History
Oct 11, 2002
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1156?
CVE-2002-1156 is considered a moderate severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2002-1156?
To mitigate CVE-2002-1156, disable WebDAV support or upgrade to a version of Apache HTTP Server newer than 2.0.42.
3
What does CVE-2002-1156 affect?
CVE-2002-1156 affects Apache HTTP Server version 2.0.42 specifically.
4
Can CVE-2002-1156 be exploited remotely?
Yes, CVE-2002-1156 can be exploited remotely by attackers to view the source code of CGI scripts.
5
What additional configurations should I check regarding CVE-2002-1156?
Check your server configuration to ensure that CGI and WebDAV are not enabled simultaneously, as this can lead to vulnerabilities like CVE-2002-1156.