Lucene search

CVE-2010-4156

🗓️ 09 Nov 2010 00:00:00Reported by ubuntu.comType

The mb_strcut function in Libmbfl 1.1.0 allows attackers to obtain sensitive information via a large parameter value. Affects PHP 5.3.x through 5.3.3

Reporter	Title	Published	Views	Family All 65
NVD	CVE-2010-4156	10 Nov 201003:00	–	nvd
securityvulns	[ MDVSA-2010:225-1 ] libmbfl	10 Nov 201000:00	–	securityvulns
securityvulns	libmbfl / {H{ information leak	10 Nov 201000:00	–	securityvulns
securityvulns	[USN-1042-1] PHP vulnerabilities	13 Jan 201100:00	–	securityvulns
securityvulns	[security bulletin] HPSBMA02662 SSRT100409 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Access, Execution of Arbitrary Code, Denial of Service (DoS)	26 Apr 201100:00	–	securityvulns
securityvulns	HP System Management Homepage multiple security vulnerabilities	26 Apr 201100:00	–	securityvulns
Exploit DB	PHP 5.3.x - 'mb_strcut()' Information Disclosure	7 Nov 201000:00	–	exploitdb
OpenVAS	PHP 'mb_strcut()' Function Information Disclosure Vulnerability	9 Nov 201000:00	–	openvas
OpenVAS	Mandriva Update for libmbfl MDVSA-2010:225 (libmbfl)	16 Nov 201000:00	–	openvas
OpenVAS	Mandriva Update for libmbfl MDVSA-2010:225-1 (libmbfl)	16 Nov 201000:00	–	openvas

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-1042-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-4156
launchpad	www.launchpad.net/bugs/cve/CVE-2010-4156
security-tracker	www.security-tracker.debian.org/tracker/CVE-2010-4156

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	10.10	noarch	php5	5.3.3-1ubuntu9.2	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Nov 2010 00:00Current

4.1Medium risk

Vulners AI Score4.1

CVSS25.0

EPSS0.012