Php.Exe.Disclosure

Description

It indicates a file disclosure vulnerability in some versions of Apache for Microsoft Windows platforms.

There exists a vulnerability in the suggested default configuration for the Apache PHP.EXE binary on Microsoft Windows platforms that allows a remote attacker to view the content of arbitrary files on a target system by passing it a specially-crafted URL request.

Affected Products

Any unprotected Windows NT or 2000 system running Apache 1.3.11 to 1.3.20 is vulnerable to the attack.

Impact

Attackers can view arbitrary file on the victim system.

Recommended Actions

Apply appropriate patches or Upgrade the system to the latest non-vulnerable version.

References