CVE-2003-0189
EPSS 17.9%
Description
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.
How to fix CVE-2003-0189
To remediate CVE-2003-0189, upgrade the affected package to a fixed version below.
- Debian/apache2—upgrade to 2.0.46 or later
Is CVE-2003-0189 being exploited?
Moderate — EPSS is 17.9%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 2.0.46