Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2003-0789
HistoryNov 03, 2003 - 5:00 a.m.

CVE-2003-0789

2003-11-0305:00:00
mitre
web.nvd.nist.gov
146
mod_cgid
apache
cve-2003-0789
security vulnerability
threaded mpm
cgi redirect paths

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0.005

Percentile

76.9%

JSON

mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.

Affected configurations

Nvd
Node
apachehttp_serverRange2.0.35–2.0.48

References

Related

httpd 1
nvd 1
debiancve 1
cvelist 1
openvas 4
securityvulns 1
gentoo 1
cert 2
nessus 3
httpd
httpd
Apache Httpd < 2.0.48 : CGI output information leak
2003-10-03 00:00:00
nvd
nvd
CVE-2003-0789
2003-11-03 05:00:00
debiancve
debiancve
CVE-2003-0789
2003-11-03 05:00:00
cvelist
cvelist
CVE-2003-0789
2003-10-30 05:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200310-04 (Apache)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200310-04 (Apache)
2008-09-24 00:00:00
HP-UX Update for Apache mod_cgid HPSBUX00301
2009-05-05 00:00:00
securityvulns
securityvulns
[RHSA-2003:320-01] Updated httpd packages fix Apache security vulnerabilities
2003-12-17 00:00:00
gentoo
gentoo
Apache: buffer overflows and a possible information disclosure
2003-10-31 00:00:00
cert
cert
Apache mod_alias vulnerable to buffer overflow via crafted regular expression
2004-02-03 00:00:00
Apache mod_rewrite vulnerable to buffer overflow via crafted regular expression
2004-02-03 00:00:00
nessus
nessus
Apache 2.0.x < 2.0.48 Multiple Vulnerabilities (OF, Info Disc.)
2003-09-26 00:00:00
Mandrake Linux Security Advisory : apache (MDKSA-2003:103)
2004-07-31 00:00:00
Mac OS X Multiple Vulnerabilities (Security Update 2004-01-26)
2004-07-06 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0.005

Percentile

76.9%

JSON
Related for CVE-2003-0789
httpd1nvd1debiancve1cvelist1openvas4securityvulns1gentoo1cert2nessus3