VulnerabilityModified
CVE-2004-0263
PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
MEDIUM 5.0EPSS 3.89%
Does this matter?
Lower severity and a low EPSS score (3.89%). Track it; it rarely justifies an emergency change on its own.
Description
PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.89% probability · 90th percentile
- CISA KEV
- Not listed
- Affected
- apache/http server · ibm/http server
- Source
- cve@mitre.org
References
- http://security.gentoo.org/glsa/glsa-200402-01.xml
- http://www.osvdb.org/3878
- http://www.securityfocus.com/bid/9599Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15072
- http://security.gentoo.org/glsa/glsa-200402-01.xml
- http://www.osvdb.org/3878
- http://www.securityfocus.com/bid/9599Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15072
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.