php -- readfile() DoS vulnerability

2004-01-2500:00:00

vuxml.freebsd.org

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

14.2%

JSON

A SUSE Security advisory reports:

A bug in the readfile() function of php4 could be used to
to crash the httpd running the php4 code when accessing
files with a multiple of the architectures page size
leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmod_php4-twig< 4.3.5_7UNKNOWN
FreeBSDanynoarchphp4-cgi< 4.3.5_7UNKNOWN
FreeBSDanynoarchphp4-cli< 4.3.5_7UNKNOWN
FreeBSDanynoarchphp4-dtc< 4.3.5_7UNKNOWN
FreeBSDanynoarchphp4-horde< 4.3.5_7UNKNOWN
FreeBSDanynoarchphp4-nms< 4.3.5_7UNKNOWN
FreeBSDanynoarchphp4< 4.3.5_7UNKNOWN
FreeBSDanynoarchmod_php< 4.3.5_7,1UNKNOWN
FreeBSDanynoarchmod_php4< 4.3.5_7,1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	mod_php4-twig	< 4.3.5_7	UNKNOWN
FreeBSD	any	noarch	php4-cgi	< 4.3.5_7	UNKNOWN
FreeBSD	any	noarch	php4-cli	< 4.3.5_7	UNKNOWN
FreeBSD	any	noarch	php4-dtc	< 4.3.5_7	UNKNOWN
FreeBSD	any	noarch	php4-horde	< 4.3.5_7	UNKNOWN
FreeBSD	any	noarch	php4-nms	< 4.3.5_7	UNKNOWN
FreeBSD	any	noarch	php4	< 4.3.5_7	UNKNOWN
FreeBSD	any	noarch	mod_php	< 4.3.5_7,1	UNKNOWN
FreeBSD	any	noarch	mod_php4	< 4.3.5_7,1	UNKNOWN