Apache HTTP Server Remote Code Execution CVE-2002-0392

checkpoint.com

2 pointsbased22 comments

Why is a vuln from 2002 on versions of apache that nobody would be using be published now?

I'm not sure why this particular CVE is [re-]surfacing now, but the January 1, 2019 Rapid7 Sonar HTTP port 80 scan found ~5,000 vulnerable servers and the list of vulnerable versions is larger than what's on the CheckPoint page: https://www.cvedetails.com/cve/CVE-2002-0392/?q=CVE-2002-039...

Reply on news.ycombinator.com