CVE-2002-1233

low Apache
CVSS v3 Base Score
2.6
AV:L/AC:H/Au:N/C:P/I:P/A:N
EPSS Score
0.1%
Exploitation probability in 30 days
Top 67% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
High
Confidentiality
P
Integrity
P
Availability
None
Published: November 4, 2002 (8592 days ago)
Last Modified: April 16, 2026
Vendor: Apache
Source: NVD

Description

A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.

CWE

NVD-CWE-Other

Affected Products

apache http server

References

🔗 marc.info 🔗 www.debian.org 🔗 www.debian.org 🔗 www.debian.org 🔗 www.iss.net