CVE-2002-0840
CVE-2002-0840
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.
EPSS 95.1% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.debian.org/security/2002/dsa-188
- http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2
- http://www.linuxsecurity.com/advisories/other_advisory-2414.html
- http://online.securityfocus.com/advisories/4617
- http://www.debian.org/security/2002/dsa-187
- http://www.apacheweek.com/issues/02-10-04
- http://www.debian.org/security/2002/dsa-195
- http://marc.info/?l=bugtraq&m=103376585508776&w=2
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html
- http://marc.info/?l=bugtraq&m=103357160425708&w=2
- http://www.redhat.com/support/errata/RHSA-2002-243.html
- http://www.osvdb.org/862
- http://www.redhat.com/support/errata/RHSA-2002-222.html
- http://www.redhat.com/support/errata/RHSA-2003-106.html
- http://www.redhat.com/support/errata/RHSA-2002-251.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10241
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0003.html
- http://www.kb.cert.org/vuls/id/240329
- http://www.securityfocus.com/bid/5847
- http://www.redhat.com/support/errata/RHSA-2002-248.html
- http://www.redhat.com/support/errata/RHSA-2002-244.html
- https://nvd.nist.gov/vuln/detail/CVE-2002-0840