Skip to content
CVE Tracker
Back

CVE-2002-1233

A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0),…

Low2.6EPSS 0.56%
Published
Updated
Reserved
Assigned by
mitre

Description

A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.

Scores

CVSS scores of CVE-2002-1233, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Low2.6AV:L/AC:H/Au:N/C:P/I:P/A:N
EPSS (exploitation in 30 days)
0.56% · top 53% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.6.

Weakness

  • n/a

Affected products

  • n/a

    • affected n/a

References (8)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .