CVE-2002-1233
Last modified
CVE-2002-1233 is a vulnerability of currently unknown severity. A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.. EPSS estimates a 0.56% chance of exploitation in the next 30 days.
Description
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Http Server | 1.3.17 |
| Apache | Http Server | 1.3.18 |
| Apache | Http Server | 1.3.19 |
| Apache | Http Server | 1.3.20 |
| Apache | Http Server | 1.3.22 |
| Apache | Http Server | 1.3.23 |
| Apache | Http Server | 1.3.24 |
| Apache | Http Server | 1.3.25 |
| Apache | Http Server | 1.3.26 |
| Apache | Http Server | 1.3.27 |
References
- http://www.iss.net/security_center/static/10413.phpVendor Advisory
- http://www.iss.net/security_center/static/10413.phpVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-1233?
How severe is CVE-2002-1233?
How do I fix CVE-2002-1233?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2002
- CVE-2002-1227PAM 0.76 treats a disabled password as if it were an empty (…
- CVE-2002-1228Unknown vulnerability in NFS on Solaris 2.5.1 through Solari…
- CVE-2002-1229Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and …
- CVE-2002-1230NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition,…
- CVE-2002-1231SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to…
- CVE-2002-1232Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in…
- CVE-2002-1234Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2002-1235The kadm_ser_in function in (1) the Kerberos v4compatibility…
- CVE-2002-1236The remote management web server for Linksys BEFSR41 EtherFa…
- CVE-2002-1238Peter Sandvik's Simple Web Server 0.5.1 and earlier allows r…
- CVE-2002-1239QNX Neutrino RTOS 6.2.0 uses the PATH environment variable t…
- CVE-2002-1242SQL injection vulnerability in PHP-Nuke before 6.0 allows re…
Are you affected by CVE-2002-1233?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST