CVE-2002-0392: Apache HTTP Server

High severity, CVSS 7.5. EPSS: 94.9% chance of exploitation in the next 30 days.

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.

Affected products

• Apache HTTP Server: from 1.2.2, up to and including 1.3.24; from 2.0.0, up to and including 2.0.36
• Debian Debian Linux: version 2.2 only

Published 2002-07-03. Last modified 2026-06-16.