## https://sploitus.com/exploit?id=SAINT:399EF180849727C5C8C2DB4378F050B0
Added: 05/08/2006
CVE: [CVE-2002-0392](<https://vulners.com/cve/CVE-2002-0392>)
BID: [5033](<http://www.securityfocus.com/bid/5033>)
OSVDB: [838](<http://www.osvdb.org/838>)
### Background
Apache web servers support _chunked_ encoding, which is used by a web client to send data to the server in parts, or _chunks_.
### Problem
A flaw in the calculation of the size of chunked encoding leads to a buffer overflow, allowing remote command execution.
### Resolution
[Upgrade](<http://www.apache.org/dist/httpd/>) to the latest version of Apache.
### References
<http://www.cert.org/advisories/CA-2002-17.html>
### Limitations
Due to the nature of this vulnerability, this exploit may not always be reliable.
### Platforms
Windows