CVE-2002-1658

Apache HTTP Server 1.3.26-1.3.27 - Buffer Overflow via Long User Argument

Title source: llm
STIX 2.1

Description

Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10414
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103480856102007&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5993

Scores

EPSS 0.0105
EPSS Percentile 60.6%

Details

Status published
Products (18)
apache/http_server 1.3.1
apache/http_server 1.3.3
apache/http_server 1.3.4
apache/http_server 1.3.6
apache/http_server 1.3.9
apache/http_server 1.3.11
apache/http_server 1.3.12
apache/http_server 1.3.14
apache/http_server 1.3.17
apache/http_server 1.3.18
... and 8 more
Published Dec 31, 2002
Tracked Since Feb 18, 2026