exploitDog

CVE-2002-1157

Опубликовано: 22 окт. 2002

Источник: redhat

Описание

Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840.

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=1616849security flaw

Связанные уязвимости

CVE-2002-1157

ubuntu

почти 23 года назад

Описание отсутствует

CVE-2002-1157

nvd

почти 23 года назад

Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840.

CVE-2002-1157

debian

почти 23 года назад

Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 ...

GHSA-42vq-2xjj-6g8w

github

больше 3 лет назад

Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840.