CVE-2004-0263

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-11-23 · updated 2026-06-16

Description

PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.

Affected products

Apache HTTP Server: 1.0, 1.0.2, 1.0.3, 1.0.5, 1.1, 1.1.1 (+43)
IBM HTTP Server: 1.3.19

References

http://security.gentoo.org/glsa/glsa-200402-01.xml
http://www.osvdb.org/3878
http://www.securityfocus.com/bid/9599
https://exchange.xforce.ibmcloud.com/vulnerabilities/15072
http://security.gentoo.org/glsa/glsa-200402-01.xml
http://www.osvdb.org/3878
http://www.securityfocus.com/bid/9599
https://exchange.xforce.ibmcloud.com/vulnerabilities/15072

Get alerted when CVE-2004-0263 or the next vulnerability affects your stack