Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2002-0839 Details

Description

The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I	CVE	Broken Link
http://archives.neohapsis.com/archives/bugtraq/2002-10/0195.html	CVE	Broken Link
http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html	CVE	Broken Link
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0012.html	CVE	Broken LinkPatchVendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530	CVE	Third Party Advisory
http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=103376585508776&w=2	CVE	Issue TrackingMailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2	CVE	Issue TrackingMailing ListThird Party Advisory
http://online.securityfocus.com/advisories/4617	CVE	Third Party AdvisoryVDB Entry
https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E	CVE
https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E	CVE
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E	CVE
https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E	CVE
https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E	CVE
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E	CVE
http://www.apacheweek.com/issues/02-10-04	CVE	Release NotesVendor Advisory
http://www.debian.org/security/2002/dsa-187	CVE	Third Party Advisory
http://www.debian.org/security/2002/dsa-188	CVE	Third Party Advisory
http://www.debian.org/security/2002/dsa-195	CVE	Third Party Advisory
http://www.iss.net/security_center/static/10280.php	CVE	Broken LinkVendor Advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php	CVE	Broken Link
http://www.linuxsecurity.com/advisories/other_advisory-2414.html	CVE	Broken Link
http://www.securityfocus.com/bid/5884	CVE	Third Party AdvisoryVDB Entry
ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I	[email protected]	Broken Link
http://archives.neohapsis.com/archives/bugtraq/2002-10/0195.html	[email protected]	Broken Link
http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html	[email protected]	Broken Link
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0012.html	[email protected]	Broken LinkPatchVendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530	[email protected]	Third Party Advisory
http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=103376585508776&w=2	[email protected]	Issue TrackingMailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2	[email protected]	Issue TrackingMailing ListThird Party Advisory
http://online.securityfocus.com/advisories/4617	[email protected]	Third Party AdvisoryVDB Entry
https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E	[email protected]
https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E	[email protected]
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E	[email protected]
https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E	[email protected]
https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E	[email protected]
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E	[email protected]
http://www.apacheweek.com/issues/02-10-04	[email protected]	Release NotesVendor Advisory
http://www.debian.org/security/2002/dsa-187	[email protected]	Third Party Advisory
http://www.debian.org/security/2002/dsa-188	[email protected]	Third Party Advisory
http://www.debian.org/security/2002/dsa-195	[email protected]	Third Party Advisory
http://www.iss.net/security_center/static/10280.php	[email protected]	Broken LinkVendor Advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php	[email protected]	Broken Link
http://www.linuxsecurity.com/advisories/other_advisory-2414.html	[email protected]	Broken Link
http://www.securityfocus.com/bid/5884	[email protected]	Third Party AdvisoryVDB Entry

see all 46 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
apache http server	>= 1.3.0, < 1.3.27
CPE cpe:2.3:a:apache:http_server:::::::: Remediation No remediation found in references.
debian debian linux	2.2 3.0
CPE cpe:2.3:o:debian:debian_linux:2.2:::::::* cpe:2.3:o:debian:debian_linux:3.0:::::::* Remediation No remediation found in references.

Change History

11 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 20, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Sep 23, 2022	Modified Analysis	[email protected]
Jun 6, 2021	CVE Modified	[email protected]
Apr 22, 2021	CVE Modified	[email protected]
Mar 30, 2021	CVE Modified	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Jan 1, 2004	Initial Analysis	[email protected]