ByteOS Network

CVE Vulnerability Details :

CVE-2002-0082

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-25 Jun, 2002 | 04:00

Updated At-08 Aug, 2024 | 02:35

▼CVE Numbering Authority (CNA)

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.calderasystems.com/support/security/advisories/CSSA-2002-011.0.txt	vendor-advisory x_refsource_CALDERA
http://www.securityfocus.com/bid/4189	vdb-entry x_refsource_BID
http://www.redhat.com/support/errata/RHSA-2002-045.html	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/advisories/4008	vendor-advisory x_refsource_HP
http://marc.info/?l=bugtraq&m=101518491916936&w=2	mailing-list x_refsource_BUGTRAQ
http://online.securityfocus.com/archive/1/258646	mailing-list x_refsource_BUGTRAQ
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-020.php	vendor-advisory x_refsource_MANDRAKE
http://www.linuxsecurity.com/advisories/other_advisory-1923.html	vendor-advisory x_refsource_ENGARDE
http://marc.info/?l=bugtraq&m=101528358424306&w=2	mailing-list x_refsource_BUGTRAQ
http://www.redhat.com/support/errata/RHSA-2002-042.html	vendor-advisory x_refsource_REDHAT
http://www.iss.net/security_center/static/8308.php	vdb-entry x_refsource_XF
http://www.redhat.com/support/errata/RHSA-2002-041.html	vendor-advisory x_refsource_REDHAT
http://www.apacheweek.com/issues/02-03-01#security	x_refsource_CONFIRM
http://ftp.support.compaq.com/patches/.new/html/SSRT0817.shtml	vendor-advisory x_refsource_COMPAQ
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000465	vendor-advisory x_refsource_CONECTIVA
http://www.securityfocus.com/advisories/3965	vendor-advisory x_refsource_HP
http://www.debian.org/security/2002/dsa-120	vendor-advisory x_refsource_DEBIAN
http://packetstormsecurity.com/files/153567/Apache-mod_ssl-OpenSSL-Remote-Buffer-Overflow.html	x_refsource_MISC

Hyperlink: http://www.calderasystems.com/support/security/advisories/CSSA-2002-011.0.txt

Resource:

vendor-advisory

x_refsource_CALDERA

Hyperlink: http://www.securityfocus.com/bid/4189

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-045.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/advisories/4008

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://marc.info/?l=bugtraq&m=101518491916936&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://online.securityfocus.com/archive/1/258646

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-020.php

Resource:

vendor-advisory

x_refsource_MANDRAKE

Hyperlink: http://www.linuxsecurity.com/advisories/other_advisory-1923.html

Resource:

vendor-advisory

x_refsource_ENGARDE

Hyperlink: http://marc.info/?l=bugtraq&m=101528358424306&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-042.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.iss.net/security_center/static/8308.php

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-041.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.apacheweek.com/issues/02-03-01#security

Resource:

x_refsource_CONFIRM

Hyperlink: http://ftp.support.compaq.com/patches/.new/html/SSRT0817.shtml

Resource:

vendor-advisory

x_refsource_COMPAQ

Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000465

Resource:

vendor-advisory

x_refsource_CONECTIVA

Hyperlink: http://www.securityfocus.com/advisories/3965

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www.debian.org/security/2002/dsa-120

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://packetstormsecurity.com/files/153567/Apache-mod_ssl-OpenSSL-Remote-Buffer-Overflow.html

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.calderasystems.com/support/security/advisories/CSSA-2002-011.0.txt	vendor-advisory x_refsource_CALDERA x_transferred
http://www.securityfocus.com/bid/4189	vdb-entry x_refsource_BID x_transferred
http://www.redhat.com/support/errata/RHSA-2002-045.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/advisories/4008	vendor-advisory x_refsource_HP x_transferred
http://marc.info/?l=bugtraq&m=101518491916936&w=2	mailing-list x_refsource_BUGTRAQ x_transferred
http://online.securityfocus.com/archive/1/258646	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-020.php	vendor-advisory x_refsource_MANDRAKE x_transferred
http://www.linuxsecurity.com/advisories/other_advisory-1923.html	vendor-advisory x_refsource_ENGARDE x_transferred
http://marc.info/?l=bugtraq&m=101528358424306&w=2	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.redhat.com/support/errata/RHSA-2002-042.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.iss.net/security_center/static/8308.php	vdb-entry x_refsource_XF x_transferred
http://www.redhat.com/support/errata/RHSA-2002-041.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.apacheweek.com/issues/02-03-01#security	x_refsource_CONFIRM x_transferred
http://ftp.support.compaq.com/patches/.new/html/SSRT0817.shtml	vendor-advisory x_refsource_COMPAQ x_transferred
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000465	vendor-advisory x_refsource_CONECTIVA x_transferred
http://www.securityfocus.com/advisories/3965	vendor-advisory x_refsource_HP x_transferred
http://www.debian.org/security/2002/dsa-120	vendor-advisory x_refsource_DEBIAN x_transferred
http://packetstormsecurity.com/files/153567/Apache-mod_ssl-OpenSSL-Remote-Buffer-Overflow.html	x_refsource_MISC x_transferred