CVE-2002-0082
Apache-SSL < 1.3.22+1.46 and mod_ssl < 2.8.7-1.3.23 - Remote Code Execution via Large Client Certificate
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2002-0082. PoCs published by spabam, Brian Peters, anilkashyap01.
AI-analyzed exploit summary This exploit targets CVE-2002-0082, a buffer overflow vulnerability in OpenSSL used by Apache. It leverages a precomputed list of memory addresses for various Linux distributions to achieve remote code execution.
Description
The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.
Exploits (5)
This exploit targets CVE-2002-0082, a buffer overflow vulnerability in OpenSSL used by Apache. It leverages a precomputed list of memory addresses for various Linux distributions to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in OpenSSL during SSLv2 protocol negotiation, specifically in the handling of the client key value. It includes a large list of target architectures and addresses for various Linux distributions and versions of Apache, aiming to achieve remote code execution.
This exploit targets CVE-2002-0082, a buffer overflow vulnerability in OpenSSL's SSLv2 protocol implementation. It leverages a crafted SSLv2 client request to trigger the overflow and execute arbitrary code on vulnerable Apache HTTP Server instances.
This repository provides a detailed technical walkthrough of exploiting CVE-2002-0082 (mod_ssl buffer overflow) for initial access and CVE-2003-0127 (ptrace race condition) for privilege escalation. It includes step-by-step enumeration, exploit selection, compilation, and execution details.
This repository contains a functional exploit for CVE-2002-0082, targeting a buffer overflow vulnerability in OpenSSL's SSLv2 protocol implementation. The exploit is designed to achieve remote code execution (RCE) on vulnerable Apache HTTP Server installations across various Linux distributions and versions.