CVE

Id
5107  
CVE No.
CVE-2002-0717  
Status
Candidate  
Description
PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed.  
Phase
Proposed (20020726)  
Votes
ACCEPT(5) Armstrong, Baker, Cole, Cox, Frech | NOOP(2) Christey, Foat | REVIEWING(1) Wall  
Comments
Christey> BID:5278 | URL:http://www.securityfocus.com/bid/5278 | HP:HPSBUX0208-207 | URL:http://online.securityfocus.com/advisories/4362  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26936 5107 CVE-2002-0717 BUGTRAQ:20020722 PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1  View
26937 5107 CVE-2002-0717 URL:http://marc.info/?l=bugtraq&m=102734515923277&w=2  View
26938 5107 CVE-2002-0717 BUGTRAQ:20020722 Advisory 02/2002: PHP remote vulnerability  View
26939 5107 CVE-2002-0717 URL:http://marc.info/?l=bugtraq&m=102734516023281&w=2  View
26940 5107 CVE-2002-0717 CERT:CA-2002-21  View
26941 5107 CVE-2002-0717 URL:http://www.cert.org/advisories/CA-2002-21.html  View
26942 5107 CVE-2002-0717 CERT-VN:VU#929115  View
26943 5107 CVE-2002-0717 URL:http://www.kb.cert.org/vuls/id/929115  View
26944 5107 CVE-2002-0717 XF:php-multipart-handler-bo(9635)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64014 JVNDB-2002-000341 PHP のファイルアップロード処理に脆弱性 PHP バージョン 4.2.0 および 4.2.1 には、multipart/form-dataによるファイルアップロードをする POST リクエストの処理に脆弱性があります。 CVE-2002-0717 5107 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000341.html  View