CVE-2002-1233
First published: Fri Oct 25 2002(Updated: )
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache HTTP server | =1.3.23 | |
| Apache HTTP server | =1.3.23 | |
| Apache HTTP server | =1.3.27 | |
| Apache HTTP server | =1.3.25 | |
| Apache HTTP server | =1.3.25 | |
| Apache HTTP server | =1.3.19 | |
| Apache HTTP server | =1.3.24 | |
| Apache HTTP server | =1.3.20 | |
| Apache HTTP server | =1.3.26 | |
| Apache HTTP server | =1.3.18 | |
| Apache HTTP server | =1.3.18 | |
| Apache HTTP server | =1.3.17 | |
| Apache HTTP server | =1.3.26 | |
| Apache HTTP server | =1.3.22 | |
| Apache HTTP server | =1.3.20 | |
| Apache HTTP server | =1.3.17 | |
| Apache HTTP server | =1.3.22 | |
| Apache HTTP server | =1.3.24 | |
| Apache HTTP server | =1.3.19 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.iss.net/security_center/static/10413.php
- http://www.debian.org/security/2002/dsa-187
- http://www.debian.org/security/2002/dsa-188
- http://www.debian.org/security/2002/dsa-195
- http://www.securityfocus.com/bid/5981
- http://www.securityfocus.com/bid/5990
- http://www.iss.net/security_center/static/10412.php
- http://marc.info/?l=bugtraq&m=103480856102007&w=2
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/event
- agent/description
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apache
- canonical/apache http server
- version/apache http server/1.3.23
- version/apache http server/1.3.27
- version/apache http server/1.3.25
- version/apache http server/1.3.19
- version/apache http server/1.3.24
- version/apache http server/1.3.20
- version/apache http server/1.3.26
- version/apache http server/1.3.18
- version/apache http server/1.3.17
- version/apache http server/1.3.22