NVD

Id
74377  
Name
CVE-2003-1307  
Description
** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server"s process group and use the server"s file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server"s TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2003-12-31  
Modified Date
2008-09-05  
Seq
2003-1307  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
382135 74377 CVE-2003-1307 http://bugs.php.net/38915  View
382136 74377 CVE-2003-1307 http://hackerdom.ru/~dimmo/phpexpl.c  View
382137 74377 CVE-2003-1307 20031226 Hijacking Apache https by mod_php  View
382138 74377 CVE-2003-1307 20061019 PHP "exec", "system", "popen" problem  View
382139 74377 CVE-2003-1307 20061020 Re: PHP "exec", "system", "popen" (+small POC)  View
382140 74377 CVE-2003-1307 9302  View

Related JVN