Description

The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.

Remediation

References

CVE-2005-3319

Related Vulnerabilities

WordPress Plugin Comment Extra Fields Multiple Cross-Site Scripting Vulnerabilities (1.7)

WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.1.9)

Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-15081)

Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13592)

WordPress Plugin Allopass for WP Cross-Site Scripting (1.0.7)

Severity

Low

Classification

CVE-2005-3319

Tags

Missing Update Known Vulnerabilities