CVE-2002-0839 Privilege escalation in n/a
Local attackers with Apache UID privileges can modify shared memory to send signals to root processes, causing denial of service or potential privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2002-0839?
CVE-2002-0839 is a high-severity vulnerability in Apache Http Server, published on 5 Oct 2002. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.
Which versions are affected by CVE-2002-0839?
It affects 2 products.
Products include Apache Http Server, Debian Debian Linux.
How do I fix CVE-2002-0839?
Upgrade to a fixed version.
Is CVE-2002-0839 being exploited?
There is no known exploitation of CVE-2002-0839 in the wild and no public exploit code.
Other vulnerabilities in Apache Http Server
Sources
Also known as GHSA-6hh5-x52p-p482.