CVE-2002-0840

Опубликовано: 11 окт. 2002

Источник: nvd

CVSS2: 6.8

EPSS Критический

Описание

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2:r2:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:8.1.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:9.2.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:9.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:8.1.7_.0.0_enterprise:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:8.1.7_.1.0_enterprise:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.91945

Критический

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-0840

ubuntu

около 23 лет назад

Описание отсутствует

CVE-2002-0840

redhat

около 23 лет назад

CVE-2002-0840

debian

около 23 лет назад

Cross-site scripting (XSS) vulnerability in the default error page of ...

GHSA-rg25-cp4q-r4c8

github

больше 3 лет назад

EPSS

Процентиль: 100%

0.91945

Критический

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other