CVE-2002-1233
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian...
CVE-2002-1233 is a low vulnerability (CVSS 2.6) in Apache Http Server, published October 25, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. No source names a fixed version.
- Severity
- 2.6 LowCVSS 2.0, NVD
- Exploit chance
- 0.56%EPSS, 47th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apacheDebian:3.0 From an advisory covering 5 CVEs | before 1.3.26-0woody | 1.3.26-0woody |
apache-sslDebian:3.0 From an advisory covering 5 CVEs | before 1.3.26.1+1.48-0woody3 | 1.3.26.1+1.48-0woody3 |
apache-perlDebian:3.0 From an advisory covering 5 CVEs | before 1.3.26-1-1.26-0woody2 | 1.3.26-1-1.26-0woody2 |
What each source reports
NVD Score used
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
- Record
CVE-2002-1233- CVSS 2.0
- 2.6 Low
AV:L/AC:H/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
- Record
CVE-2002-1233- Updated
- 2026-11-02
EUVDEUVD-2002-1217No score
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
- Record
EUVD-2002-1217- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h5gj-xw8w-hmjfNo score
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian...
A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
- Record
GHSA-h5gj-xw8w-hmjf- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.