medium5.0
CVE-2002-0240
PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server…
Impact
PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Http Server | Version 2.0.28 |