CVE

Id
33777  
CVE No.
CVE-2008-3660  
Status
Candidate  
Description
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.  
Phase
Assigned (20080812)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
368370 33777 CVE-2008-3660 BUGTRAQ:20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl  View
368371 33777 CVE-2008-3660 URL:http://www.securityfocus.com/archive/1/archive/1/501376/100/0/threaded  View
368372 33777 CVE-2008-3660 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=234102  View
368373 33777 CVE-2008-3660 MLIST:[oss-security] 20080808 CVE request: php-5.2.6 overflow issues  View
368374 33777 CVE-2008-3660 URL:http://www.openwall.com/lists/oss-security/2008/08/08/2  View
368375 33777 CVE-2008-3660 MLIST:[oss-security] 20080813 Re: CVE request: php-5.2.6 overflow issues  View
368376 33777 CVE-2008-3660 URL:http://www.openwall.com/lists/oss-security/2008/08/13/8  View
368377 33777 CVE-2008-3660 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2009-0035  View
368378 33777 CVE-2008-3660 CONFIRM:http://support.apple.com/kb/HT3549  View
368379 33777 CVE-2008-3660 APPLE:APPLE-SA-2009-05-12  View
368380 33777 CVE-2008-3660 URL:http://lists.apple.com/archives/security-announce/2009/May/msg00002.html  View
368381 33777 CVE-2008-3660 DEBIAN:DSA-1647  View
368382 33777 CVE-2008-3660 URL:http://www.debian.org/security/2008/dsa-1647  View
368383 33777 CVE-2008-3660 FEDORA:FEDORA-2009-3768  View
368384 33777 CVE-2008-3660 URL:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html  View
368385 33777 CVE-2008-3660 FEDORA:FEDORA-2009-3848  View
368386 33777 CVE-2008-3660 URL:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html  View
368387 33777 CVE-2008-3660 GENTOO:GLSA-200811-05  View
368388 33777 CVE-2008-3660 URL:http://security.gentoo.org/glsa/glsa-200811-05.xml  View
368389 33777 CVE-2008-3660 HP:HPSBUX02431  View
368390 33777 CVE-2008-3660 URL:http://marc.info/?l=bugtraq&m=124654546101607&w=2  View
368391 33777 CVE-2008-3660 HP:SSRT090085  View
368392 33777 CVE-2008-3660 URL:http://marc.info/?l=bugtraq&m=124654546101607&w=2  View
368393 33777 CVE-2008-3660 HP:HPSBUX02465  View
368394 33777 CVE-2008-3660 URL:http://marc.info/?l=bugtraq&m=125631037611762&w=2  View
368395 33777 CVE-2008-3660 HP:SSRT090192  View
368396 33777 CVE-2008-3660 URL:http://marc.info/?l=bugtraq&m=125631037611762&w=2  View
368397 33777 CVE-2008-3660 MANDRIVA:MDVSA-2009:021  View
368398 33777 CVE-2008-3660 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:021  View
368399 33777 CVE-2008-3660 MANDRIVA:MDVSA-2009:022  View
368400 33777 CVE-2008-3660 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:022  View
368401 33777 CVE-2008-3660 MANDRIVA:MDVSA-2009:023  View
368402 33777 CVE-2008-3660 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:023  View
368403 33777 CVE-2008-3660 MANDRIVA:MDVSA-2009:024  View
368404 33777 CVE-2008-3660 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:024  View
368405 33777 CVE-2008-3660 REDHAT:RHSA-2009:0350  View
368406 33777 CVE-2008-3660 URL:http://www.redhat.com/support/errata/RHSA-2009-0350.html  View
368407 33777 CVE-2008-3660 SUSE:SUSE-SR:2008:018  View
368408 33777 CVE-2008-3660 URL:http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html  View
368409 33777 CVE-2008-3660 CERT:TA09-133A  View
368410 33777 CVE-2008-3660 URL:http://www.us-cert.gov/cas/techalerts/TA09-133A.html  View
368411 33777 CVE-2008-3660 OVAL:oval:org.mitre.oval:def:9597  View
368412 33777 CVE-2008-3660 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9597  View
368413 33777 CVE-2008-3660 SECTRACK:1020994  View
368414 33777 CVE-2008-3660 URL:http://www.securitytracker.com/id?1020994  View
368415 33777 CVE-2008-3660 SECUNIA:32148  View
368416 33777 CVE-2008-3660 URL:http://secunia.com/advisories/32148  View
368417 33777 CVE-2008-3660 SECUNIA:31982  View
368418 33777 CVE-2008-3660 URL:http://secunia.com/advisories/31982  View
368419 33777 CVE-2008-3660 SECUNIA:35074  View
368420 33777 CVE-2008-3660 URL:http://secunia.com/advisories/35074  View
368421 33777 CVE-2008-3660 SECUNIA:35306  View
368422 33777 CVE-2008-3660 URL:http://secunia.com/advisories/35306  View
368423 33777 CVE-2008-3660 SECUNIA:35650  View
368424 33777 CVE-2008-3660 URL:http://secunia.com/advisories/35650  View
368425 33777 CVE-2008-3660 SECUNIA:32746  View
368426 33777 CVE-2008-3660 URL:http://secunia.com/advisories/32746  View
368427 33777 CVE-2008-3660 VUPEN:ADV-2008-2336  View
368428 33777 CVE-2008-3660 URL:http://www.vupen.com/english/advisories/2008/2336  View
368429 33777 CVE-2008-3660 VUPEN:ADV-2009-1297  View
368430 33777 CVE-2008-3660 URL:http://www.vupen.com/english/advisories/2009/1297  View
368431 33777 CVE-2008-3660 XF:php-curl-unspecified(44402)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50830 JVNDB-2008-006140 XRMS におけるクロスサイトスクリプティングの脆弱性 XRMS には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3664 33777 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006140.html  View