CVE-2002-1593
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote...
CVE-2002-1593 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published September 25, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.04%, the 94th percentile. Fixed in apache2 2.0.42.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 7.04%EPSS, 94th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.0.42apache2 +2 more
Description
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
CVE-2002-1593- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
CVE-2002-1593- Updated
- 2026-11-02
EUVDEUVD-2002-1574No score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
EUVD-2002-1574- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxjj-crx8-rwggNo score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote...
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
GHSA-xxjj-crx8-rwgg- Updated
- 2026-11-02
OSVBELL-CVE-2002-1593
CVE-2002-1593 does not affect BellSoft software
- Record
BELL-CVE-2002-1593- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVNo score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
CVE-2002-1593- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1593No score
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
- Record
DEBIAN-CVE-2002-1593- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/5816
kb.cert.org/vuls/id/406121
securitytracker.com/id?1005285
apache.org/dist/httpd/CHANGES_2.0
exchange.xforce.ibmcloud.com/vulnerabilities/10208
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
Show 27 moreShow less
nvd.nist.gov/vuln/detail/CVE-2002-1593
github.com/advisories/GHSA-xxjj-crx8-rwgg
docs.bell-sw.com/security/cves/CVE-2002-1593
security-tracker.debian.org/tracker/CVE-2002-1593