CVE-2002-0654: A path-revealing exposure was present in multiview type map negotiation (such as the default error documents) where a module would report the full path of the typemapped .var file when multiple documents or no documents could be served. Additionally a path-revealing exposure in cgi/cgid when Apache fails to invoke a script. The modules would report "couldn't create child process /path-to-script/script.pl" revealing the full path of the script.

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2002-08-09 00:00 UTC
  • Importiert: 2026-10-15 12:54 UTC
  • Quelle-ID: apache_httpd_sec
  • uid_hash: ba7d2ce409fd28db433279bd3fda38597ac75e9ddff45913036741b2b3b87769

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2002-0654

2002-08-20

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Apache HTTP Server Security (httpd.org JSON)

apache_httpd_sec

vendor_advisory webserver, httpd - de https://httpd.apache.org/security/vulnerabilities-httpd.json