CVE-2008-5814

2009-01-0200:00:00

ubuntu.com

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.2%

JSON

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and
earlier, when display_errors is enabled, allows remote attackers to inject
arbitrary web script or HTML via unspecified vectors. NOTE: because of the
lack of details, it is unclear whether this is related to CVE-2006-0208.

Bugs

<https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-5814>

Notes

Author	Note
jdstrand	verified 5.2.10.dfsg.1-1ubuntu1 in 9.10 is not affected by looking at the source package

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchphp5< 5.1.2-1ubuntu3.14UNKNOWN
ubuntu8.04noarchphp5< 5.2.4-2ubuntu5.6UNKNOWN
ubuntu8.10noarchphp5< 5.2.6-2ubuntu4.2UNKNOWN
ubuntu9.04noarchphp5< 5.2.6.dfsg.1-3ubuntu4.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	php5	< 5.1.2-1ubuntu3.14	UNKNOWN
ubuntu	8.04	noarch	php5	< 5.2.4-2ubuntu5.6	UNKNOWN
ubuntu	8.10	noarch	php5	< 5.2.6-2ubuntu4.2	UNKNOWN
ubuntu	9.04	noarch	php5	< 5.2.6.dfsg.1-3ubuntu4.1	UNKNOWN