First published: Wed Sep 01 2004(Updated: )
PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apache HTTP server | =2.0.42 | |
IBM HTTP Server | =1.3.19 | |
Apache HTTP server | =1.3.23 | |
Apache HTTP server | =2.0.47 | |
Apache HTTP server | =1.3.27 | |
Apache HTTP server | =1.0.5 | |
Apache HTTP server | =1.1.1 | |
Apache HTTP server | =2.0.35 | |
Apache HTTP server | =2.0.37 | |
Apache HTTP server | =2.0.44 | |
Apache HTTP server | =1.3.1 | |
Apache HTTP server | =1.3.25 | |
Apache HTTP server | =1.3.28 | |
Apache HTTP server | =1.3.19 | |
Apache HTTP server | =2.0.39 | |
Apache HTTP server | =1.3.24 | |
Apache HTTP server | =1.3.20 | |
Apache HTTP server | =1.0.2 | |
Apache HTTP server | =1.3.7 | |
Apache HTTP server | =1.1 | |
Apache HTTP server | =1.3.6 | |
Apache HTTP server | =2.0.28-beta | |
Apache HTTP server | =2.0.41 | |
Apache HTTP server | =1.3.4 | |
Apache HTTP server | =1.2.5 | |
Apache HTTP server | =2.0.9 | |
Apache HTTP server | =1.0 | |
Apache HTTP server | =1.3.18 | |
Apache HTTP server | =2.0.32 | |
Apache HTTP server | =1.0.3 | |
Apache HTTP server | =2.0.38 | |
Apache HTTP server | =1.3 | |
Apache HTTP server | =1.3.12 | |
Apache HTTP server | =2.0.48 | |
Apache HTTP server | =1.3.3 | |
Apache HTTP server | =1.3.17 | |
Apache HTTP server | =2.0.45 | |
Apache HTTP server | =1.3.26 | |
Apache HTTP server | =1.3.9 | |
Apache HTTP server | =2.0.40 | |
Apache HTTP server | =2.0.36 | |
Apache HTTP server | =1.3.14 | |
Apache HTTP server | =1.3.29 | |
Apache HTTP server | =2.0.46 | |
Apache HTTP server | =1.3.22 | |
Apache HTTP server | =1.3.11 | |
Apache HTTP server | =2.0.43 | |
Apache HTTP server | =1.2 | |
Apache HTTP server | =2.0.28 | |
Apache HTTP server | =2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.