VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 12, 2001· Updated Jun 16, 2026

CVE-2001-1385

CVE-2001-1385

Description

The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • PHP/PHP4 versions
    cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*
  • Mandrakesoft/Mandrake Linux
    cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
  • Apache/PHPllm-create
    Range: >=4.0.0, <=4.0.4

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.