CVE-2002-0653: Modssl Mod SSL

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.

Affected products

• Modssl Mod SSL: up to and including 2.8.9

Published 2002-07-11. Last modified 2026-06-16.