CVE-2003-1307

Summary

CVE	CVE-2003-1307
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2003-12-31 05:00:00 UTC
Updated	2025-04-03 01:03:51 UTC
Description	The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.

Primary CVSS: v2.0 4.3 from [email protected]

AV:L/AC:L/Au:S/C:P/I:P/A:P

Problem Types: NVD-CWE-Other | n/a

Access Vector

Local

Access Complexity

Low

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

Partial

AV:L/AC:L/Au:S/C:P/I:P/A:P

Type	Vendor	Product	Version	Update	Edition	Language
Application	Apache	Http Server	2.0	All	All	All
Application	Apache	Http Server	2.0.28	All	All	All
Application	Apache	Http Server	2.0.28	beta	All	All
Application	Apache	Http Server	2.0.28	beta	win32	All
Application	Apache	Http Server	2.0.32	All	All	All
Application	Apache	Http Server	2.0.32	beta	win32	All
Application	Apache	Http Server	2.0.34	beta	win32	All
Application	Apache	Http Server	2.0.35	All	All	All
Application	Apache	Http Server	2.0.36	All	All	All
Application	Apache	Http Server	2.0.37	All	All	All
Application	Apache	Http Server	2.0.38	All	All	All
Application	Apache	Http Server	2.0.39	All	All	All
Application	Apache	Http Server	2.0.40	All	All	All
Application	Apache	Http Server	2.0.41	All	All	All
Application	Apache	Http Server	2.0.42	All	All	All
Application	Apache	Http Server	2.0.43	All	All	All
Application	Apache	Http Server	2.0.44	All	All	All
Application	Apache	Http Server	2.0.45	All	All	All
Application	Apache	Http Server	2.0.46	All	All	All
Application	Apache	Http Server	2.0.46	All	win32	All
Application	Apache	Http Server	2.0.47	All	All	All
Application	Apache	Http Server	2.0.48	All	All	All
Application	Apache	Http Server	2.0.9	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

Reference	Source	Link	Tags
www.securityfocus.com/archive/1/449298/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com
SecurityFocus	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com
SecurityFocus HOME Mailing List: BugTraq	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Exploit, Vendor Advisory
Apache mod_php Module File Descriptor Leakage Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Exploit
PHP Bugs: #38915: mod_php: system() (and similar) don't cleanup opened handles of Apache	af854a3a-2127-422b-91ae-364da2661108	bugs.php.net	Exploit
Page not found · GitHub Pages	af854a3a-2127-422b-91ae-364da2661108	hackerdom.ru	Exploit
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Organization	Published	Contributor	Statement
Red Hat	2006-10-25	Mark J Cox	This is not a vulnerability. When PHP scripts are interpreted using the dynamically loaded mod_php DSO, the PHP interpreter executes with the privileges of the httpd child process. The PHP intepreter does not "sandbox" PHP scripts from the environment in which they run. On any modern Unix system a process can easily obtain access to all the parent file descriptors anyway, even if they have been closed.

There are currently no legacy QID mappings associated with this CVE.