CVE-2002-0839

published 2002-10-11

CVE-2002-0839: The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any…

high 7.2 CVSS 3.1

AV L AC L Au N C C I C A C

The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apache	http_server	>= 1.3.0 < 1.3.27	1.3.27
debian	debian_linux	—	—
debian	debian_linux	—	—