Lucene search

K
freebsdFreeBSD1A0704E7-0EDF-11E0-BECC-0022156E8794
HistoryDec 13, 2010 - 12:00 a.m.

php-imap -- Denial of Service

2010-12-1300:00:00
vuxml.freebsd.org
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.019 Low

EPSS

Percentile

88.5%

The following DoS condition in IMAP extension
was fixed in PHP 5.3.4 and PHP 5.2.15:

A remote user can send specially crafted IMAP user name
or password data to trigger a double free memory error
in ‘ext/imap/php_imap.c’ and cause the target service
to crash.
It may be possible to execute arbitrary code.
However, code execution was not confirmed.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchphp5-imap< 5.3.4UNKNOWN
FreeBSDanynoarchphp52-imap< 5.2.15UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.019 Low

EPSS

Percentile

88.5%