Description
PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
References
- 3878 vdb-entry
- 9599 vdb-entry
- php-virtualhost-info-disclosure(15072) vdb-entry
- GLSA-200402-01 vendor-advisory