CVE-2004-0958

php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.redhat.com/support/errata/RHSA-2004-687.html	Patch Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0053.html
https://bugzilla.fedora.us/show_bug.cgi?id=2344
http://secunia.com/advisories/12560/
http://securitytracker.com/id?1011279
http://marc.info/?l=bugtraq&m=109527531130492&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/17393
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10863

Configurations

Configuration 1 (hide)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Information

Published : 2004-11-02 21:00

Updated : 2017-10-10 18:29

NVD link : CVE-2004-0958

Mitre link : CVE-2004-0958

JSON object : View

CWE

NVD-CWE-Other

Products Affected

php

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.redhat.com/support/errata/RHSA-2004-687.html", "name": "RHSA-2004:687", "tags": ["Patch", "Vendor Advisory"], "refsource": "REDHAT"}, {"url": "http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0053.html", "name": "20040915 [VulnWatch] PHP Vulnerability N. 1", "tags": [], "refsource": "VULNWATCH"}, {"url": "https://bugzilla.fedora.us/show_bug.cgi?id=2344", "name": "FLSA:2344", "tags": [], "refsource": "FEDORA"}, {"url": "http://secunia.com/advisories/12560/", "name": "12560", "tags": [], "refsource": "SECUNIA"}, {"url": "http://securitytracker.com/id?1011279", "name": "1011279", "tags": [], "refsource": "SECTRACK"}, {"url": "http://marc.info/?l=bugtraq&m=109527531130492&w=2", "name": "20040915 PHP Vulnerability N. 1", "tags": [], "refsource": "BUGTRAQ"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17393", "name": "php-phpinfo-disclose-memory(17393)", "tags": [], "refsource": "XF"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10863", "name": "oval:org.mitre.oval:def:10863", "tags": [], "refsource": "OVAL"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-0958", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2004-11-03T05:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "5.0.2"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-10-11T01:29Z"}

5.0 /10