CVE-2004-0263
PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2004-11-23
- Last modified
- 2024-08-08
Affected products
References
- http://security.gentoo.org/glsa/glsa-200402-01.xml
- http://www.osvdb.org/3878
- http://www.securityfocus.com/bid/9599
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15072
