CVE-2004-0263: Medium severity Apache HTTP Server vulnerability
PHP 4.3.4 and earlier in Apache 1.x and 2.x (modphp) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0263?
CVE-2004-0263 is considered a medium severity vulnerability as it can lead to information leakage.
How do I fix CVE-2004-0263?
To fix CVE-2004-0263, upgrade to a version of PHP later than 4.3.4 that is not affected by this vulnerability.
What systems are affected by CVE-2004-0263?
CVE-2004-0263 affects Apache 1.x and 2.x running mod_php prior to version 4.3.4.
What kind of information can be leaked due to CVE-2004-0263?
CVE-2004-0263 can leak global variables between virtual hosts, potentially exposing sensitive data to attackers.
How does CVE-2004-0263 impact virtual hosts?
CVE-2004-0263 allows global variables to be shared across virtual hosts on the same Apache child process, increasing the risk of data exposure.