Vulnerability in Apache Http Server

CVE-2002-2029

PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.

EPSS: 0.246 (97.7th percentile) — read the EPSS interpretation.

Affected products

Apache Http_server — versions 1.3.11, 1.3.12, 1.3.13
N/a — versions n/a

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)