CVE-2002-0840

Scores

EPSS

0.911high91.1%
0%20%40%60%80%100%

Percentile: 91.1%

CVSS

6.8medium2.0
0246810

CVSS Score: 6.8/10

All CVSS Scores

CVSS 2.0
6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is “Off” and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvd

Exploits

Exploit ID: 21885

Source: exploitdb

URL: https://www.exploit-db.com/exploits/21885

Vulnerable Software (8)

Type: Configuration

Product: apache

Operating System: debian

Trait:
{  "fixed": "1.3.27-0.1"}

Source: debian

Type: Configuration

Product: apache-perl

Operating System: debian

Trait:
{  "fixed": "1.3.26-1.1-1.27-3-1"}

Source: debian

Type: Configuration

Product: apache2

Operating System: debian

Trait:
{  "fixed": "2.0.43-1"}

Source: debian

Type: Configuration

Vendor: *

Product: application_server

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*",...

Source: nvd

Type: Configuration

Vendor: *

Product: database_server

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*",...

Source: nvd

Type: Configuration

Vendor: *

Product: http_server

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*",...

Source: nvd

Type: Configuration

Vendor: *

Product: oracle8i

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*",...

Source: nvd

Type: Configuration

Vendor: *

Product: oracle9i

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*",...

Source: nvd

End of list