CVE-2003-0789 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2003-0789
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0789

Description: mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/13552 REDHAT http://www.redhat.com/support/errata/RHSA-2003-320.html MANDRAKE http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:103 HP http://www.securityfocus.com/advisories/6079 GENTOO http://security.gentoo.org/glsa/glsa-200310-04.xml CONFIRM http://lists.apple.com/mhonarc/security-announce/msg00045.html http://docs.info.apple.com/article.html?artnum=61798 http://apache.secsup.org/dist/httpd/Announcement2.html CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000775 CIAC http://www.ciac.org/ciac/bulletins/o-015.shtml BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=106761802305141&w=2 BID 9504 8926 APPLE http://www.zone-h.org/advisories/read/id=3818

Return to the previous page.