Description
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.
Remediation
References
Related Vulnerabilities
WordPress Plugin UpiCRM-Free WordPress CRM and Lead Management Information Disclosure (2.1.8.5)
WordPress Plugin DukaPress Multiple Cross-Site Scripting Vulnerabilities (2.5.9)
WordPress Plugin Theme Editor Arbitrary File Download (2.5)
WordPress Plugin JSM file_get_contents() Shortcode Server-Side Request Forgery (2.7.0)
Apache HTTP Server Insufficient Verification of Data Authenticity Vulnerability (CVE-2022-31813)