CVE-2002-0082

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the…

published June 25, 2002

CVSS
—
EPSS
30%
Percentile
98.2
In the wild
Unconfirmed
What it is

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.29662 · 98.2th percentile
Published
2002-06-25T04:00Z
EPSS history
Timeline
  • 25 JUN 04:00Z
    The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the…
    cvelistv5