CVE-2002-0653

EIP tracks 1 public exploit for CVE-2002-0653. PoCs published by Frank DENIS.

AI-analyzed exploit summary The exploit describes an off-by-one buffer overflow vulnerability in mod_ssl for Apache when processing overly long entries in a .htaccess file. Specifically, setting the DATE_LOCALE variable to a string of 12288 bytes triggers the overflow, potentially leading to a DoS or arbitrary code execution.

Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.