CVE-2002-1593: Medium severity Apache HTTP Server vulnerability
Published Sep 25, 2002
·Updated
moddav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
Affected Software
10 affected components
Apache HTTP Server=2.0.35
Apache HTTP Server=2.0.37
Apache HTTP Server=2.0.39
Apache HTTP Server=2.0.41
Apache HTTP Server=2.0.32
Apache HTTP Server=2.0.38
Apache HTTP Server=2.0.40
Apache HTTP Server=2.0.36
Apache HTTP Server=2.0.28
Apache HTTP Server=2.0
Remediation
Patch Available
Event History
Sep 25, 2002
CVE Published
04:00 AM
Mar 13, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1593?
CVE-2002-1593 has been classified as a medium severity vulnerability due to its potential to disrupt service.
2
How do I fix CVE-2002-1593?
To fix CVE-2002-1593, upgrade Apache HTTP Server to version 2.0.42 or later.
3
What does CVE-2002-1593 affect?
CVE-2002-1593 affects Apache HTTP Server versions 2.0 up to and including 2.0.41.
4
What type of attack does CVE-2002-1593 facilitate?
CVE-2002-1593 facilitates denial of service attacks through a null dereference that causes high CPU consumption.
5
Can CVE-2002-1593 be exploited remotely?
Yes, CVE-2002-1593 can be exploited by remote attackers to kill a child process.