CVE-2003-0789

2003-11-0305:00:00

Debian Security Bug Tracker

security-tracker.debian.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

69.2%

JSON

mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.

OSVersionArchitecturePackageVersionFilename
Debian12allapache2< 2.0.48apache2_2.0.48_all.deb
Debian11allapache2< 2.0.48apache2_2.0.48_all.deb
Debian999allapache2< 2.0.48apache2_2.0.48_all.deb
Debian13allapache2< 2.0.48apache2_2.0.48_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	apache2	< 2.0.48	apache2_2.0.48_all.deb
Debian	11	all	apache2	< 2.0.48	apache2_2.0.48_all.deb
Debian	999	all	apache2	< 2.0.48	apache2_2.0.48_all.deb
Debian	13	all	apache2	< 2.0.48	apache2_2.0.48_all.deb