Lucene search

[email protected]CVE-2001-1385

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2001-1385

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

cve-2001-1385

php 4.0.0

php 4.0.4

apache module

virtual host

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.2%

JSON

The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the ‘engine = off’ option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.

Affected configurations

NVD

Node

phpphpMatch4.0

phpphpMatch4.0.1

phpphpMatch4.0.3

phpphpMatch4.0.4

Node

mandrakesoftmandrake_linuxMatch7.2

CPENameOperatorVersion
php:phpphpeq4.0
php:phpphpeq4.0.1
php:phpphpeq4.0.3
php:phpphpeq4.0.4

CPE	Name	Operator	Version
php:php	php	eq	4.0
php:php	php	eq	4.0.1
php:php	php	eq	4.0.3
php:php	php	eq	4.0.4

References

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373

marc.info/?l=bugtraq&m=97957961212852

www.debian.org/security/2001/dsa-020

www.iss.net/security_center/static/5939.php

www.linux-mandrake.com/en/security/2001/MDKSA-2001-013.php3

www.redhat.com/support/errata/RHSA-2000-136.html

www.securityfocus.com/bid/2205

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.2%

JSON

Related for CVE-2001-1385

cvelist1 nvd1 openvas2 nessus2