Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-3660
HistoryAug 15, 2008 - 12:41 a.m.

CVE-2008-3660

2008-08-1500:41:00
CWE-20
[email protected]
web.nvd.nist.gov
7

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.4

Confidence

High

EPSS

0.048

Percentile

92.8%

JSON

PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo…php.

Affected configurations

Nvd
Node
phpphpMatch4.4.0
OR
phpphpMatch4.4.1
OR
phpphpMatch4.4.2
OR
phpphpMatch4.4.3
OR
phpphpMatch4.4.4
OR
phpphpMatch4.4.5
OR
phpphpMatch4.4.6
OR
phpphpMatch4.4.7
OR
phpphpMatch4.4.8
OR
phpphpMatch5.2.0
OR
phpphpMatch5.2.1
OR
phpphpMatch5.2.2
OR
phpphpMatch5.2.3
OR
phpphpMatch5.2.4
OR
phpphpMatch5.2.5
OR
phpphpMatch5.2.6

References

Related

openvas 53
prion 1
seebug 1
ubuntucve 1
cvelist 1
veracode 1
cve 1
nessus 23
debian 1
osv 1
redhat 3
freebsd 1
centos 2
oraclelinux 2
slackware 1
fedora 4
ubuntu 1
gentoo 1
securityvulns 1
openvas
openvas
PHP FastCGI Module File Extension Denial Of Service Vulnerabilities
2010-04-19 00:00:00
Debian: Security Advisory (DSA-1647-1)
2008-10-08 00:00:00
Debian Security Advisory DSA 1647-1 (php5)
2008-10-09 00:00:00
prion
prion
Server side request forgery (ssrf)
2008-08-15 00:41:00
seebug
seebug
PHP FastCGIζ¨‘ε—ζ–‡δ»Άζ‰©ε±•ζ‹’η»ζœεŠ‘ζΌζ΄ž
2008-10-08 00:00:00
ubuntucve
ubuntucve
CVE-2008-3660
2008-08-14 00:00:00
cvelist
cvelist
CVE-2008-3660
2008-08-15 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:31:22
cve
cve
CVE-2008-3660
2008-08-15 00:41:00
nessus
nessus
openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-168)
2009-07-21 00:00:00
Debian DSA-1647-1 : php5 - several vulnerabilities
2008-10-07 00:00:00
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-5546)
2008-09-17 00:00:00
debian
debian
[SECURITY] [DSA 1647-1] New php5 packages fix several vulnerabilities
2008-10-07 06:52:54
osv
osv
php5 - several vulnerabilities
2008-10-07 00:00:00
redhat
redhat
(RHSA-2009:0337) Moderate: php security update
2009-04-06 00:00:00
(RHSA-2009:0338) Moderate: php security update
2009-04-06 00:00:00
(RHSA-2009:0350) Moderate: php security update
2009-04-14 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2008-12-04 00:00:00
centos
centos
php security update
2009-04-06 17:44:07
php security update
2009-04-07 12:21:16
oraclelinux
oraclelinux
php security update
2009-04-06 00:00:00
php security update
2009-04-06 00:00:00
slackware
slackware
[slackware-security] php
2008-12-05 07:37:41
fedora
fedora
[SECURITY] Fedora 10 Update: maniadrive-1.2-13.fc10
2009-05-30 02:34:40
[SECURITY] Fedora 9 Update: php-5.2.9-2.fc9
2009-05-30 02:38:47
[SECURITY] Fedora 10 Update: php-5.2.9-2.fc10
2009-05-30 02:34:40
ubuntu
ubuntu
PHP vulnerabilities
2009-02-12 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2008-11-16 00:00:00
securityvulns
securityvulns
About the security content of Security Update 2009-002 / Mac OS X v10.5.7
2009-05-14 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.4

Confidence

High

EPSS

0.048

Percentile

92.8%

JSON
Related for NVD:CVE-2008-3660
openvas53prion1seebug1ubuntucve1cvelist1veracode1cve1nessus23debian1osv1redhat3freebsd1centos2oraclelinux2slackware1fedora4ubuntu1gentoo1securityvulns1