CVE-2002-0839 Common Vulnerabilities and Exposures

Upstream information

CVE-2002-0839 at MITRE

Description

The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	7.2
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
Access Vector	Local
Access Complexity	Low
Authentication	None
Confidentiality Impact	Complete
Integrity Impact	Complete
Availability Impact	Complete

SUSE Bugzilla entries: 37025 [RESOLVED / FIXED], 54600 [RESOLVED / FIXED]

SUSE Security Advisories:

SuSE-SA:2002:039, published Thu Oct 31 11:00:00 MET 2002

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 00:29:24 2013
CVE page last modified: Fri Dec 8 16:08:50 2023