CVE-2004-0263

PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.

🔗 References (8)

• cve@mitrehttp://security.gentoo.org/glsa/glsa-200402-01.xml
• cve@mitrehttp://www.osvdb.org/3878
• cve@mitrehttp://www.securityfocus.com/bid/9599
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/15072
• af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-200402-01.xml
• af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/3878
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/9599
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/15072