CVE-2003-0789

CVE-2003-0789 describes a critical vulnerability in mod_cgid within Apache HTTP Server versions prior to 2.0.48, specifically when using a threaded Multi-Processing Module (MPM). This flaw allows for improper handling of CGI redirect paths, potentially leading to a CGI program's output being sent to an unintended client. With a CVSS score of 10.0, this vulnerability is highly severe, indicating a network-based attack with low complexity, requiring no authentication, and resulting in complete compromise of confidentiality, integrity, and availability. Despite its age and high severity, there is no known active exploitation, publicly available exploit code in Metasploit or ExploitDB, or inclusion in CISA's KEV catalog, though it has garnered significant community discussion.