Unrated severityNVD Advisory· Published Mar 15, 2002· Updated Apr 16, 2026
CVE-2002-0082
CVE-2002-0082
Description
The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.
Affected products
14cpe:2.3:a:apache-ssl:apache-ssl:1.40:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:apache-ssl:apache-ssl:1.40:*:*:*:*:*:*:*
- cpe:2.3:a:apache-ssl:apache-ssl:1.41:*:*:*:*:*:*:*
- cpe:2.3:a:apache-ssl:apache-ssl:1.42:*:*:*:*:*:*:*
- cpe:2.3:a:apache-ssl:apache-ssl:1.44:*:*:*:*:*:*:*
- cpe:2.3:a:apache-ssl:apache-ssl:1.45:*:*:*:*:*:*:*
- cpe:2.3:a:apache-ssl:apache-ssl:1.46:*:*:*:*:*:*:*
cpe:2.3:a:mod_ssl:mod_ssl:2.7.1:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:mod_ssl:mod_ssl:2.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:mod_ssl:mod_ssl:2.8:*:*:*:*:*:*:*
- cpe:2.3:a:mod_ssl:mod_ssl:2.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:mod_ssl:mod_ssl:2.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:mod_ssl:mod_ssl:2.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:mod_ssl:mod_ssl:2.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:mod_ssl:mod_ssl:2.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:mod_ssl:mod_ssl:2.8.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
18- www.iss.net/security_center/static/8308.phpnvdPatchVendor Advisory
- distro.conectiva.com.br/atualizacoes/nvd
- ftp.support.compaq.com/patches/.new/html/SSRT0817.shtmlnvd
- marc.infonvd
- marc.infonvd
- online.securityfocus.com/archive/1/258646nvd
- packetstormsecurity.com/files/153567/Apache-mod_ssl-OpenSSL-Remote-Buffer-Overflow.htmlnvd
- www.apacheweek.com/issues/02-03-01nvd
- www.calderasystems.com/support/security/advisories/CSSA-2002-011.0.txtnvd
- www.debian.org/security/2002/dsa-120nvd
- www.linux-mandrake.com/en/security/2002/MDKSA-2002-020.phpnvd
- www.linuxsecurity.com/advisories/other_advisory-1923.htmlnvd
- www.redhat.com/support/errata/RHSA-2002-041.htmlnvd
- www.redhat.com/support/errata/RHSA-2002-042.htmlnvd
- www.redhat.com/support/errata/RHSA-2002-045.htmlnvd
- www.securityfocus.com/advisories/3965nvd
- www.securityfocus.com/advisories/4008nvd
- www.securityfocus.com/bid/4189nvd
News mentions
0No linked articles in our index yet.