UpHeron
All vulnerabilities

Servers and applications

CVE-2002-0061

Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.

Severity
High 7.5
Published
21 Mar 2002
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Fixed in
1.3.24, 2.0.34
Exploit chance
52% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
OS command injection (CWE-78)
Attack
Over the network · No login needed
Attacker can
Read some data · Change some data · Slow it down
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • Every version before 1.3.24
  • From 2.0.0 before 2.0.34

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2002-0061
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2002-0061