CVE-2002-0653 - CVE House
Back to Database
Status published High CVE-2002-0653

Off-by-one buffer overflow in the ssl_compat_directive function, as called by...

Vulnerability Description

Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0653

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Affected Software

mod ssl
Vulnerable Versions:
0

Timeline

Official Publish: April 2nd, 2003
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.