Lucene search

[email protected]CVE-2003-0166

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2003-0166

2003-04-0205:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2003-0166

php

denial of service

memory consumption

arbitrary code

vulnerability

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.11 Low

EPSS

Percentile

95.1%

JSON

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.

CPENameOperatorVersion
php:phpphpeq4.2.0
php:phpphpeq4.1.0
php:phpphpeq4.0.4
php:phpphpeq4.3.0
php:phpphpeq4.0.5
php:phpphpeq4.2.2
php:phpphpeq4.0.7
php:phpphpeq4.0.2
php:phpphpeq4.1.1
php:phpphpeq4.2.3

CPE	Name	Operator	Version
php:php	php	eq	4.2.0
php:php	php	eq	4.1.0
php:php	php	eq	4.0.4
php:php	php	eq	4.3.0
php:php	php	eq	4.0.5
php:php	php	eq	4.2.2
php:php	php	eq	4.0.7
php:php	php	eq	4.0.2
php:php	php	eq	4.1.1
php:php	php	eq	4.2.3

Rows per page:

1-10 of 171

References

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691

marc.info/?l=bugtraq&m=104869828526885&w=2

marc.info/?l=bugtraq&m=104878100719467&w=2

marc.info/?l=bugtraq&m=104931415307111&w=2

www.securityfocus.com/bid/7197

www.securityfocus.com/bid/7198

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.11 Low

EPSS

Percentile

95.1%

JSON

Related for CVE-2003-0166

nessus1