CVE-2002-0061
N/A
Published: April 2, 2003 at 05:00 AM UTC
Updated: June 16, 2026 at 09:56 PM UTC
1 product affected across 1 vendorHTTP Server
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 52%
Description
Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v < 1.3.242.0.0 ≤ v < 2.0.34
Affected range stops below 1.3.24, so it looks safe — our inference, not a vendor statement
Affected range stops below 2.0.34, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
- https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
References (9)
Mailing Listx_refsource_BUGTRAQThird Party Advisory
Source: [email protected]
http://marc.info/?l=bugtraq&m=101674082427358&w=2Mailing Listx_refsource_BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
Source: [email protected]
http://online.securityfocus.com/archive/1/263927x_refsource_CONFIRMRelease Notes
Source: [email protected]
http://www.apacheweek.com/issues/02-03-29#apache1324VDB Entryx_refsource_XFBroken Link
Source: [email protected]
http://www.iss.net/security_center/static/8589.phpVDB Entryx_refsource_BIDBroken LinkThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/4335Mailing Listx_refsource_MLISTIssue TrackingVendor Advisory
Source: [email protected]
https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3EMailing Listx_refsource_MLISTIssue TrackingVendor Advisory
Source: [email protected]
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3EMailing Listx_refsource_MLISTIssue TrackingVendor Advisory
Source: [email protected]
https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3EQuick Info
StatusMODIFIED
CWE
CWE-78
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card