Description
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.
References
- DSA-020 vendor-advisory
- 2205 vdb-entry
- MDKSA-2001:013 vendor-advisory
- CLA-2001:373 vendor-advisory
- php-view-source-code(5939) vdb-entry
- 20010112 PHP Security Advisory - Apache Module bugs mailing-list
- RHSA-2000:136 vendor-advisory