CVE

Id
6995  
CVE No.
CVE-2003-0166  
Status
Candidate  
Description
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.  
Phase
Assigned (20030326)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40757 6995 CVE-2003-0166 BUGTRAQ:20030326 @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator  View
40758 6995 CVE-2003-0166 URL:http://marc.info/?l=bugtraq&m=104869828526885&w=2  View
40759 6995 CVE-2003-0166 BUGTRAQ:20030327 RE: FUD-ALARM: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator  View
40760 6995 CVE-2003-0166 URL:http://marc.info/?l=bugtraq&m=104878100719467&w=2  View
40761 6995 CVE-2003-0166 BUGTRAQ:20030402 Inaccurate Reports Concerning PHP Vulnerabilities  View
40762 6995 CVE-2003-0166 URL:http://marc.info/?l=bugtraq&m=104931415307111&w=2  View
40763 6995 CVE-2003-0166 CONECTIVA:CLSA-2003:691  View
40764 6995 CVE-2003-0166 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691  View
40765 6995 CVE-2003-0166 SCO:CSSA-2003-SCO.28  View
40766 6995 CVE-2003-0166 BID:7197  View
40767 6995 CVE-2003-0166 URL:http://www.securityfocus.com/bid/7197  View
40768 6995 CVE-2003-0166 BID:7198  View

Related JVN