CVE-2001-0108: Medium severity PHP PHP vulnerability
PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0108?
CVE-2001-0108 is considered a high severity vulnerability due to the potential for unauthorized access to restricted areas of a website.
How do I fix CVE-2001-0108?
To fix CVE-2001-0108, upgrade PHP to a version later than 4.0.4 that addresses this access control issue.
What versions of PHP are affected by CVE-2001-0108?
CVE-2001-0108 affects PHP versions 4.0 and earlier, including 4.0.1, 4.0.3, and 4.0.4.
Can CVE-2001-0108 allow remote code execution?
CVE-2001-0108 does not directly allow remote code execution but does enable unauthorized access, which could lead to further exploitation.
What kind of attacks can exploit CVE-2001-0108?
CVE-2001-0108 can be exploited through crafted HTTP requests that bypass .htaccess restrictions, enabling access to restricted resources.