CVE-2001-1385: Medium severity PHP PHP vulnerability
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1385?
CVE-2001-1385 has been rated as a moderate severity vulnerability.
How do I fix CVE-2001-1385?
To fix CVE-2001-1385, ensure that you configure the PHP engine correctly for each virtual host and avoid disabling it globally.
What software versions are affected by CVE-2001-1385?
CVE-2001-1385 affects PHP versions 4.0.0 through 4.0.4 and certain versions of Mandrake Linux.
What does CVE-2001-1385 exploit?
CVE-2001-1385 exploits the misconfiguration of the PHP engine in Apache, which can expose PHP source code due to improper settings.
Who is impacted by CVE-2001-1385?
Web administrators using PHP versions 4.0.0 to 4.0.4 with Apache configurations may be impacted by CVE-2001-1385.