← Database

CVE-2002-1850

HIGH CVSS: 7.5 Published: 2002-12-31 Modified: 2026-06-16

Description

mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, which results in a read/write deadlock between httpd and the CGI script.

Affected Platforms

Apache Http Server

Weakness Type

CWE-667

References