CVE-2002-1593
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote...
CVE-2002-1593 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published September 25, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.30%, the 94th percentile. Fixed in apache2 2.0.42.
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
Exploit likelihood
What each source reports
NVD Score used
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
CVE-2002-1593- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
CVE-2002-1593- Updated
- 2026-11-02
EUVDEUVD-2002-1574 No score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
EUVD-2002-1574- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxjj-crx8-rwgg No score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote...
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
GHSA-xxjj-crx8-rwgg- Updated
- 2026-11-02
OSVBELL-CVE-2002-1593
CVE-2002-1593 does not affect BellSoft software
- Record
BELL-CVE-2002-1593- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSV No score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
CVE-2002-1593- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1593 No score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
DEBIAN-CVE-2002-1593- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/5816
kb.cert.org/vuls/id/406121
securitytracker.com/id?1005285
apache.org/dist/httpd/CHANGES_2.0
exchange.xforce.ibmcloud.com/vulnerabilities/10208
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
Show 27 moreShow less
nvd.nist.gov/vuln/detail/CVE-2002-1593
github.com/advisories/GHSA-xxjj-crx8-rwgg
docs.bell-sw.com/security/cves/CVE-2002-1593
security-tracker.debian.org/tracker/CVE-2002-1593