CVE-2004-0263 PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow r...
MediumCVSS 5.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.0 | No fix listed |
| Apache HTTP Server | = 1.0.2 | No fix listed |
| Apache HTTP Server | = 1.0.3 | No fix listed |
| Apache HTTP Server | = 1.0.5 | No fix listed |
| Apache HTTP Server | = 1.1 | No fix listed |
| Apache HTTP Server | = 1.1.1 | No fix listed |
| Apache HTTP Server | = 1.2 | No fix listed |
| Apache HTTP Server | = 1.2.5 | No fix listed |
| Apache HTTP Server | = 1.3 | No fix listed |
| Apache HTTP Server | = 1.3.1 | No fix listed |
| Apache HTTP Server | = 1.3.3 | No fix listed |
| Apache HTTP Server | = 1.3.4 | No fix listed |
| Apache HTTP Server | = 1.3.6 | No fix listed |
| Apache HTTP Server | = 1.3.7 | No fix listed |
| Apache HTTP Server | = 1.3.9 | No fix listed |
| Apache HTTP Server | = 1.3.11 | No fix listed |
| Apache HTTP Server | = 1.3.12 | No fix listed |
| Apache HTTP Server | = 1.3.14 | No fix listed |
| Apache HTTP Server | = 1.3.17 | No fix listed |
| Apache HTTP Server | = 1.3.18 | No fix listed |
| Apache HTTP Server | = 1.3.19 | No fix listed |
| Apache HTTP Server | = 1.3.20 | No fix listed |
| Apache HTTP Server | = 1.3.22 | No fix listed |
| Apache HTTP Server | = 1.3.23 | No fix listed |
| Apache HTTP Server | = 1.3.24 | No fix listed |
Show 25 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3.25 | No fix listed |
| Apache HTTP Server | = 1.3.26 | No fix listed |
| Apache HTTP Server | = 1.3.27 | No fix listed |
| Apache HTTP Server | = 1.3.28 | No fix listed |
| Apache HTTP Server | = 1.3.29 | No fix listed |
| Apache HTTP Server | = 2.0 | No fix listed |
| Apache HTTP Server | = 2.0.9 | No fix listed |
| Apache HTTP Server | = 2.0.28 | No fix listed |
| Apache HTTP Server | = 2.0.28-beta | No fix listed |
| Apache HTTP Server | = 2.0.32 | No fix listed |
| Apache HTTP Server | = 2.0.35 | No fix listed |
| Apache HTTP Server | = 2.0.36 | No fix listed |
| Apache HTTP Server | = 2.0.37 | No fix listed |
| Apache HTTP Server | = 2.0.38 | No fix listed |
| Apache HTTP Server | = 2.0.39 | No fix listed |
| Apache HTTP Server | = 2.0.40 | No fix listed |
| Apache HTTP Server | = 2.0.41 | No fix listed |
| Apache HTTP Server | = 2.0.42 | No fix listed |
| Apache HTTP Server | = 2.0.43 | No fix listed |
| Apache HTTP Server | = 2.0.44 | No fix listed |
| Apache HTTP Server | = 2.0.45 | No fix listed |
| Apache HTTP Server | = 2.0.46 | No fix listed |
| Apache HTTP Server | = 2.0.47 | No fix listed |
| Apache HTTP Server | = 2.0.48 | No fix listed |
| ibm http server | = 1.3.19 | No fix listed |
References
- GLSA-200402-01 vendor-advisory
- 3878 vdb-entry
- 9599 vdb-entry vendor-advisory
- php-virtualhost-info-disclosure(15072) vdb-entry