cbcvebase.
CVE-2002-1658
published 2002-12-31

CVE-2002-1658: Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is…

PriorityP413medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
1.05%
60.9th percentile
Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.

Affected

18 ranges
VendorProductVersion rangeFixed in
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.