Description

mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.

Remediation

References

CVE-2003-0789

Related Vulnerabilities

WordPress Plugin YITH Custom Thank You Page for Woocommerce Security Bypass (1.1.6)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-44040)

WordPress Plugin Deny All Firewall Cross-Site Request Forgery (1.1.6)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36131)

Oracle JRE CVE-2013-2471 Vulnerability (CVE-2013-2471)

Severity

Critical

Classification

CVE-2003-0789

Tags

Missing Update Known Vulnerabilities