Lucene search

K
freebsdFreeBSDEA09C5DF-4362-11DB-81E1-000E0C2E438A
HistoryAug 18, 2006 - 12:00 a.m.

php -- multiple vulnerabilities

2006-08-1800:00:00
vuxml.freebsd.org
17

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.317 Low

EPSS

Percentile

96.9%

The PHP development team reports:

Added missing safe_mode/open_basedir checks inside the
error_log(), file_exists(), imap_open() and imap_reopen()
functions.
Fixed overflows inside str_repeat() and wordwrap()
functions on 64bit systems.
Fixed possible open_basedir/safe_mode bypass in cURL
extension and with realpath cache.
Fixed overflow in GD extension on invalid GIF
images.
Fixed a buffer overflow inside sscanf() function.
Fixed an out of bounds read inside stripos()
function.
Fixed memory_limit restriction on 64 bit system.

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.317 Low

EPSS

Percentile

96.9%