CVE-2002-0240

MEDIUM 5.0CVE-2002-0240 · Published 29/05/2002 · updated 16/06/2026

In short

CVE-2002-0240 is a MEDIUM (CVSS 5.0) vulnerability affecting http server (apache).
Chance of exploitation in the next 30 days (EPSS): 7.4%, higher than 94.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
http server apache	`= 2.0.28`	No fix yet

Description

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.

References

marc.info
iss.net/security_center/static/8119.php
securityfocus.com/bid/4057 · Vendor Advisory

More vulnerabilities in http server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free