Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-2531
HistoryAug 20, 2010 - 10:00 p.m.

CVE-2010-2531

2010-08-2022:00:01
CWE-200
[email protected]
web.nvd.nist.gov
8

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

9.5

Confidence

High

EPSS

0.018

Percentile

88.4%

JSON

The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.

Affected configurations

Nvd
Node
phpphpRange5.2.0–5.2.14
OR
phpphpRange5.3.0–5.3.3
Node
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0

References

Related

veracode 1
prion 1
cvelist 1
cve 1
ubuntucve 1
openvas 38
nessus 23
securityvulns 6
fedora 6
centos 1
oraclelinux 1
redhat 1
debian 2
osv 1
ubuntu 1
gentoo 1
veracode
veracode
Information Disclosure
2020-04-10 00:53:58
prion
prion
Buffer overflow
2010-08-20 22:00:00
cvelist
cvelist
CVE-2010-2531
2010-08-20 20:00:00
cve
cve
CVE-2010-2531
2010-08-20 22:00:01
ubuntucve
ubuntucve
CVE-2010-2531
2010-08-20 00:00:00
openvas
openvas
PHP 5.2.x < 5.2.14, 5.3.x < 5.3.3 Multiple Vulnerabilities
2010-08-02 00:00:00
Mandriva Update for php MDVSA-2010:140 (php)
2010-07-30 00:00:00
Mandriva Update for php MDVSA-2010:140 (php)
2010-07-30 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : php (MDVSA-2010:140)
2010-07-30 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2010:139)
2010-07-30 00:00:00
Oracle Linux 4 / 5 : php (ELSA-2010-0919)
2013-07-12 00:00:00
securityvulns
securityvulns
PHP multiple security vulnerabilities
2010-09-27 00:00:00
[security bulletin] HPSBMA02662 SSRT100409 rev.1 - HP System Management Homepage &#40;SMH&#41; for Linux and Windows, Remote Unauthorized Access, Execution of Arbitrary Code, Denial of Service &#40;DoS&#41;
2011-04-26 00:00:00
HP System Management Homepage multiple security vulnerabilities
2011-04-26 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: php-eaccelerator-0.9.6.1-2.fc13
2010-08-23 22:00:56
[SECURITY] Fedora 13 Update: maniadrive-1.2-22.fc13
2010-08-23 22:00:56
[SECURITY] Fedora 12 Update: maniadrive-1.2-22.fc12
2010-08-23 22:08:06
centos
centos
php security update
2010-11-30 12:21:14
oraclelinux
oraclelinux
php security update
2010-11-29 00:00:00
redhat
redhat
(RHSA-2010:0919) Moderate: php security update
2010-11-29 00:00:00
debian
debian
[SECURITY] [DSA 2266-1] php5 security update
2011-06-29 18:42:45
[SECURITY] [DSA 2262-2] php5 update
2011-07-01 20:00:32
osv
osv
php5 - several
2011-06-29 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2010-09-20 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2011-10-10 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

9.5

Confidence

High

EPSS

0.018

Percentile

88.4%

JSON
Related for NVD:CVE-2010-2531
veracode1prion1cvelist1cve1ubuntucve1openvas38nessus23securityvulns6fedora6centos1oraclelinux1redhat1debian2osv1ubuntu1gentoo1