CVE

Id
5374  
CVE No.
CVE-2002-0986  
Status
Entry  
Description
The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28908 5374 CVE-2002-0986 BUGTRAQ:20020823 PHP: Bypass safe_mode and inject ASCII control chars with mail()  View
28909 5374 CVE-2002-0986 URL:http://marc.info/?l=bugtraq&m=103011916928204&w=2  View
28910 5374 CVE-2002-0986 DEBIAN:DSA-168  View
28911 5374 CVE-2002-0986 URL:http://www.debian.org/security/2002/dsa-168  View
28912 5374 CVE-2002-0986 SUSE:SuSE-SA:2002:036  View
28913 5374 CVE-2002-0986 URL:http://www.novell.com/linux/security/advisories/2002_036_modphp4.html  View
28914 5374 CVE-2002-0986 REDHAT:RHSA-2002:213  View
28915 5374 CVE-2002-0986 URL:http://www.redhat.com/support/errata/RHSA-2002-213.html  View
28916 5374 CVE-2002-0986 REDHAT:RHSA-2002:214  View
28917 5374 CVE-2002-0986 URL:http://www.redhat.com/support/errata/RHSA-2002-214.html  View
28918 5374 CVE-2002-0986 REDHAT:RHSA-2002:243  View
28919 5374 CVE-2002-0986 URL:http://www.redhat.com/support/errata/RHSA-2002-243.html  View
28920 5374 CVE-2002-0986 REDHAT:RHSA-2002:244  View
28921 5374 CVE-2002-0986 URL:http://www.redhat.com/support/errata/RHSA-2002-244.html  View
28922 5374 CVE-2002-0986 REDHAT:RHSA-2002:248  View
28923 5374 CVE-2002-0986 URL:http://www.redhat.com/support/errata/RHSA-2002-248.html  View
28924 5374 CVE-2002-0986 REDHAT:RHSA-2003:159  View
28925 5374 CVE-2002-0986 URL:http://www.redhat.com/support/errata/RHSA-2003-159.html  View
28926 5374 CVE-2002-0986 CONECTIVA:CLA-2002:545  View
28927 5374 CVE-2002-0986 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545  View
28928 5374 CVE-2002-0986 CALDERA:CSSA-2003-008.0  View
28929 5374 CVE-2002-0986 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt  View
28930 5374 CVE-2002-0986 MANDRAKE:MDKSA-2003:082  View
28931 5374 CVE-2002-0986 URL:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082  View
28932 5374 CVE-2002-0986 BUGTRAQ:20030707 [OpenPKG-SA-2003.032] OpenPKG Security Advisory (php)  View
28933 5374 CVE-2002-0986 URL:http://marc.info/?l=bugtraq&m=105760591228031&w=2  View
28934 5374 CVE-2002-0986 CERT-VN:VU#410609  View
28935 5374 CVE-2002-0986 URL:http://www.kb.cert.org/vuls/id/410609  View
28936 5374 CVE-2002-0986 BID:5562  View
28937 5374 CVE-2002-0986 URL:http://www.securityfocus.com/bid/5562  View
28938 5374 CVE-2002-0986 OSVDB:2160  View
28939 5374 CVE-2002-0986 URL:http://www.osvdb.org/2160  View
28940 5374 CVE-2002-0986 XF:php-mail-ascii-injection(9959)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63945 JVNDB-2002-000272 PHP の mail() 関数における ASCII 制御文字の不適切なフィルタリングの脆弱性 PHP に実装されている mail() 関数に、引数として意図的に ASCII 制御文字を渡された場合に、適切なフィルタリングが行われないことにより、メールヘッダ、及び、メール本文を改ざんすることが可能な脆弱性が存在します。 CVE-2002-0986 5374 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000272.html  View