Unscored DSA-188 5 CVEs

apache-ssl - several vulnerabilities

Published Nov 5, 2002 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	apache-ssl	1.3.26.1+1.48-0woody3

Vulnerabilities 5

Unscored —

CVE-2001-0131

htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink…

Feb 14, 2001
Unscored —

CVE-2002-0839

The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UI…

Oct 5, 2002
Unscored —

CVE-2002-0840 Public exploit EPSS 95%

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26,…

apache2 Debian

Sep 1, 2004
Unscored —

CVE-2002-0843 EPSS 21%

Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0…

Oct 5, 2002
Unscored —

CVE-2002-1233

A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26…

Oct 25, 2002