Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-1019
HistoryJan 10, 2005 - 12:00 a.m.

CVE-2004-1019

2005-01-1000:00:00
ubuntu.com
ubuntu.com
13

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

93.0%

The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2
allows remote attackers to cause a denial of service and execute arbitrary
code via untrusted data to the unserialize function that may trigger
“information disclosure, double-free and negative reference index array
underflow” results.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchphp4< 4.4.2-1build1UNKNOWN
ubuntu6.10noarchphp4< 4.4.2-1build1UNKNOWN
ubuntu6.06noarchphp5< 5.1.2-1ubuntu3.9UNKNOWN
ubuntu6.10noarchphp5< 5.1.6-1ubuntu2.6UNKNOWN
ubuntu7.04noarchphp5< 5.2.1-0ubuntu1.4UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

93.0%