CVE-2002-0840

Опубликовано: 11 окт. 2002

Источник: nvd

CVSS2: 6.8

EPSS Критический

Описание

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2:r2:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:8.1.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:9.2.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:9.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:8.1.7_.0.0_enterprise:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:8.1.7_.1.0_enterprise:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.92046

Критический

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-0840

ubuntu

больше 22 лет назад

Описание отсутствует

CVE-2002-0840

redhat

больше 22 лет назад

CVE-2002-0840

debian

больше 22 лет назад

Cross-site scripting (XSS) vulnerability in the default error page of ...

GHSA-rg25-cp4q-r4c8

github

около 3 лет назад

EPSS

Процентиль: 100%

0.92046

Критический

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other