CVE-2002-1592: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 12.5% chance of exploitation in the next 30 days.

The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.

Affected products

• Apache HTTP Server: version 2.0 only; version 2.0.28 only; version 2.0.32 only; version 2.0.35 only

Published 2002-05-06. Last modified 2026-06-16.