Lucene search

K
freebsdFreeBSD7FCF1727-BE71-11DB-B2EC-000C6EC775D9
HistoryFeb 09, 2007 - 12:00 a.m.

php -- multiple vulnerabilities

2007-02-0900:00:00
vuxml.freebsd.org
21

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.042 Low

EPSS

Percentile

92.1%

Multiple vulnerabilities have been found in PHP, including:
buffer overflows, stack overflows, format string, and
information disclosure vulnerabilities.
The session extension contained safe_mode and
open_basedir bypasses, but the FreeBSD Security
Officer does not consider these real security
vulnerabilities, since safe_mode and
open_basedir are insecure by design and should
not be relied upon.

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.042 Low

EPSS

Percentile

92.1%