CVE-2001-1385

The CVE-2001-1385 issue concerns the Apache module for PHP 4.0.0–4.0.4. When a virtual host is configured with engine = off, PHP can be disabled for other virtual hosts, causing Apache to serve PHP source code instead of executing it. This is a disclosure vulnerability affecting PHP/Apache deploy...

Invision Power Board ipchat.php root_path Parameter Remote File Inclusion

It is possible to make the remote host include PHP files hosted on a third-party server using Invision Power Board. The ipchat.php script fails to sanitize input passed to the 'rootpath' parameter. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the...

CVE-1999-1385

The CVE-1999-1385 entry describes a buffer overflow in the FreeBSD ppp program (FreeBSD 2.1 and earlier) that allows local users to gain privileges via a long HOME environment variable. The connected documents corroborate the description, identifying the affected component as the ppp program on o...