CVE-2002-1850: Apache HTTP Server

High severity, CVSS 7.5. EPSS: 17.4% chance of exploitation in the next 30 days.

mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, which results in a read/write deadlock between httpd and the CGI script.

Affected products

• Apache HTTP Server: version 2.0.39 only; version 2.0.40 only

Published 2002-12-31. Last modified 2026-06-16.