CVE

Id
42981  
CVE No.
CVE-2010-0397  
Status
Candidate  
Description
The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
468354 42981 CVE-2010-0397 MLIST:[oss-security] 20100312 CVE-2010-0397: NULL pointer dereference in PHP"s xmlrpc extension  View
468355 42981 CVE-2010-0397 URL:http://www.openwall.com/lists/oss-security/2010/03/12/5  View
468356 42981 CVE-2010-0397 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573573  View
468357 42981 CVE-2010-0397 CONFIRM:http://support.apple.com/kb/HT4312  View
468358 42981 CVE-2010-0397 CONFIRM:http://support.apple.com/kb/HT4435  View
468359 42981 CVE-2010-0397 APPLE:APPLE-SA-2010-08-24-1  View
468360 42981 CVE-2010-0397 URL:http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html  View
468361 42981 CVE-2010-0397 APPLE:APPLE-SA-2010-11-10-1  View
468362 42981 CVE-2010-0397 URL:http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html  View
468363 42981 CVE-2010-0397 MANDRIVA:MDVSA-2010:068  View
468364 42981 CVE-2010-0397 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:068  View
468365 42981 CVE-2010-0397 REDHAT:RHSA-2010:0919  View
468366 42981 CVE-2010-0397 URL:http://www.redhat.com/support/errata/RHSA-2010-0919.html  View
468367 42981 CVE-2010-0397 SUSE:SUSE-SR:2010:012  View
468368 42981 CVE-2010-0397 URL:http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html  View
468369 42981 CVE-2010-0397 SUSE:SUSE-SR:2010:013  View
468370 42981 CVE-2010-0397 URL:http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html  View
468371 42981 CVE-2010-0397 SUSE:SUSE-SR:2010:017  View
468372 42981 CVE-2010-0397 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html  View
468373 42981 CVE-2010-0397 BID:38708  View
468374 42981 CVE-2010-0397 URL:http://www.securityfocus.com/bid/38708  View
468375 42981 CVE-2010-0397 SECUNIA:42410  View
468376 42981 CVE-2010-0397 URL:http://secunia.com/advisories/42410  View
468377 42981 CVE-2010-0397 VUPEN:ADV-2010-0724  View
468378 42981 CVE-2010-0397 URL:http://www.vupen.com/english/advisories/2010/0724  View
468379 42981 CVE-2010-0397 VUPEN:ADV-2010-3081  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38683 JVNDB-2010-004468 OpenTTD におけるサービス運用妨害 (DoS) の脆弱性 OpenTTD には、サーバーパスワードのリクエストに応答して認証のための企業のパスワードを受け入れるため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2010-0401 42981 6.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004468.html  View