CVE-2007-1717

2007-03-2800:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

php

mail function

security risk

cve-2007-1717

6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.011 Low

EPSS

Percentile

83.8%

JSON

The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ (‘\0’) byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases when the trailing contents of e-mail messages are important, such as logging information or if the message is expected to be well-formed.

CPENameOperatorVersion
php:phpphpeq4.3.9
php:phpphpeq4.0
php:phpphpeq5.1.5
php:phpphpeq5.1.2
php:phpphpeq4.2.0
php:phpphpeq5.1.1
php:phpphpeq4.4.4
php:phpphpeq5.0.0
php:phpphpeq4.1.0
php:phpphpeq5.1.6

CPE	Name	Operator	Version
php:php	php	eq	4.3.9
php:php	php	eq	4.0
php:php	php	eq	5.1.5
php:php	php	eq	5.1.2
php:php	php	eq	4.2.0
php:php	php	eq	5.1.1
php:php	php	eq	4.4.4
php:php	php	eq	5.0.0
php:php	php	eq	4.1.0
php:php	php	eq	5.1.6