Unscored severity · published Dec 31, 2003
CVE-2003-1307
The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file…
–
CVSS
1.7%
EPSS
No
On KEV
Description
The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HS
HTTP Server · Apache
2.0; 2.0.9; 2.0.28; 2.0.28; 2.0.28; 2.0.32; +17 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1307
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1307
Exploit
http://bugs.php.net/38915
Exploit
http://hackerdom.ru/~dimmo/phpexpl.c
Exploit
http://www.securityfocus.com/archive/1/348368
www.securityfocus.com
http://www.securityfocus.com/archive/1/449234/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/449298/100/0/threaded
Exploit
http://www.securityfocus.com/bid/9302
More from HTTP Server
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
9.8
CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
9.1
CVE-2024-38475
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
9.0
CVE-2021-40438
mod_proxy SSRF
7.8
CVE-2019-0211
Apache HTTP Server Privilege Escalation Vulnerability