CGI versions before 5.00 for Perl contain a vulnerability where an infinite loop can occur on processing a short request body if $DISABLE_UPLOADS is set. This happens because the code reads until the Content-Length bytes have arrived, but if the actual body is shorter, the read returns 0 repeatedly, causing the loop to never end. This allows a client to keep a server process busy indefinitely with a crafted request.