The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apachemodphp | — | Apply OS X security update 2006-001 | Dec 16, 2011 | Oct 27, 2005 |
| Gentoo Linux | — | Upgrade dev-php/mod_php.Upgrade dev-php/php-cgi.Upgrade dev-php/php. | Oct 30, 2017 | Oct 27, 2005 |
| Php | — | Upgrade to PHP version 5.1.0Upgrade to PHP version 4.4.1 | Oct 1, 2012 | Oct 27, 2005 |
| Suse | — | Upgrade php4-develUpgrade php4-fastcgiUpgrade php4-sysvshmUpgrade php4-imapUpgrade php4-sessionUpgrade apache2-mod_php4Upgrade php4-mysqlUpgrade php4-pearUpgrade mod_php4-servletUpgrade mod_php4-coreUpgrade apache-mod_php4Upgrade php4-exif | Dec 12, 2013 | Oct 27, 2005 |
| Ubuntu | — | Upgrade php4-gdUpgrade php5-cliUpgrade libapache2-mod-php4Upgrade php5-gdUpgrade php4-cgiUpgrade php4-cli | Nov 8, 2024 | Oct 27, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub