CVE-2002-1850

mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, which results in a read/write deadlock between httpd and the CGI script.

• CWE-667

• http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/generators/mod_cgi.c?r1=1.148.2.7&r2=1.148.2.8Broken Link
• http://issues.apache.org/bugzilla/show_bug.cgi?id=10515Issue Tracking
• http://issues.apache.org/bugzilla/show_bug.cgi?id=22030Issue Tracking, Patch
• http://marc.info/?l=apache-httpd-dev&m=103291952019514&w=2Mailing List
• http://seclists.org/bugtraq/2002/Sep/0253.htmlExploit, Mailing List, Third Party Advisory
• http://securitytracker.com/id?1007823Broken Link, Patch, Third Party Advisory, VDB Entry
• http://www.iss.net/security_center/static/10200.phpBroken Link, Patch
• http://www.securityfocus.com/bid/5787Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/8725Broken Link, Patch, Third Party Advisory, VDB Entry
• http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/generators/mod_cgi.c?r1=1.148.2.7&r2=1.148.2.8Broken Link
• http://issues.apache.org/bugzilla/show_bug.cgi?id=10515Issue Tracking
• http://issues.apache.org/bugzilla/show_bug.cgi?id=22030Issue Tracking, Patch
• http://marc.info/?l=apache-httpd-dev&m=103291952019514&w=2Mailing List
• http://seclists.org/bugtraq/2002/Sep/0253.htmlExploit, Mailing List, Third Party Advisory
• http://securitytracker.com/id?1007823Broken Link, Patch, Third Party Advisory, VDB Entry
• http://www.iss.net/security_center/static/10200.phpBroken Link, Patch
• http://www.securityfocus.com/bid/5787Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/8725Broken Link, Patch, Third Party Advisory, VDB Entry

Published

Dec 31, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1844Microsoft Windows Media Player (WMP) 6.3, when installed on …7.8
• CVE-2002-1845Cross-site scripting (XSS) vulnerability in index.php in Yet…
• CVE-2002-1846Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not req…
• CVE-2002-1847Buffer overflow in mplay32.exe of Microsoft Windows Media Pl…
• CVE-2002-1848TightVNC before 1.2.4 running on Windows stores unencrypted …
• CVE-2002-1849ParaChat Server 4.0 does not log users off if the browser's …
• CVE-2002-1851Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to…
• CVE-2002-1852Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 all…
• CVE-2002-1853Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4…
• CVE-2002-1854Rlaj whois CGI script (whois.cgi) 1.0 allows remote attacker…
• CVE-2002-1855Macromedia JRun 3.0 through 4.0, when running on Windows, al…
• CVE-2002-1856HP Application Server 8.0, when running on Windows, allows r…