CVE-2002-1592
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an...
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
Exploit likelihood
What each source reports
NVD Score used
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
- Record
CVE-2002-1592- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
- Record
CVE-2002-1592- Updated
- 2026-11-02
EUVDEUVD-2002-1573 No score
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
- Record
EUVD-2002-1573- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qhx7-w346-73rc No score
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an...
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
- Record
GHSA-qhx7-w346-73rc- Updated
- 2026-11-02
OSVBELL-CVE-2002-1592
CVE-2002-1592 does not affect BellSoft software
- Record
BELL-CVE-2002-1592- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
OSV No score
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
- Record
CVE-2002-1592- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1592 No score
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
- Record
DEBIAN-CVE-2002-1592- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1592 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published May 6, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.5%, the 96th percentile. Fixed in apache2 2.0.36.
References
kb.cert.org/vuls/id/165803
securityfocus.com/bid/5256
apache.org/dist/httpd/CHANGES_2.0
iss.net/security_center/static/9623.php
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
Show 26 moreShow less
nvd.nist.gov/vuln/detail/CVE-2002-1592
github.com/advisories/GHSA-qhx7-w346-73rc
docs.bell-sw.com/security/cves/CVE-2002-1592
security-tracker.debian.org/tracker/CVE-2002-1592