VULNERABILITY INTELLIGENCE

CVE-2002-1658

CVSS score4.6 MEDIUM
EPSS probability1.05%
CISA KEVNot currently listed
Published2002-12-31
Last modified2026-06-16

Description

Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htd... .