CVE-2002-0839: apache http_server
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2002-0839 is a high (CVSS 7.2) vulnerability in apache http_server. EPSS estimates a 0.94% chance of exploitation in the next 30 days, higher than 60.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 05-10-2002PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.94%
Chance of exploitation in the next 30 days
Percentile
61%
Versus all other CVEs
30-day change
0.00 pp
From 0.94% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Apache1 product
- http_server≥ 1.3.0, < 1.3.27
Debian1 product
- debian_linuxEOL2.2 | 3.0
2 vendors · 2 products
References
22 links
- marc.info?l=apache-httpd-announce&m=103367938230488&w=2X Refsource CONFIRMMailing ListThird Party Advisory
- www.linuxsecurity.com/advisories/other_advisory-2414.htmlVendor AdvisoryX Refsource ENGARDEBroken Link
- marc.info?l=bugtraq&m=130497311408250&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
- archives.neohapsis.com/archives/vulnwatch/2002-q4/0012.htmlMailing ListX Refsource VULNWATCHBroken LinkPatchVendor Advisory
Show all 22 references
- marc.info?l=bugtraq&m=103376585508776&w=2Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory
- www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.phpVendor AdvisoryX Refsource MANDRAKEBroken Link
- distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530Vendor AdvisoryX Refsource CONECTIVAThird Party Advisory