NVD

Id
13989  
Name
CVE-2010-2531  
Description
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-08-20  
Modified Date
2016-08-22  
Seq
2010-2531  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
77477 13989 CVE-2010-2531 APPLE-SA-2010-08-24-1  View
77478 13989 CVE-2010-2531 APPLE-SA-2010-11-10-1  View
77479 13989 CVE-2010-2531 SUSE-SR:2010:017  View
77480 13989 CVE-2010-2531 SUSE-SR:2010:018  View
77481 13989 CVE-2010-2531 HPSBMA02662  View
77482 13989 CVE-2010-2531 SSRT100826  View
77483 13989 CVE-2010-2531 http://support.apple.com/kb/HT4312  View
77484 13989 CVE-2010-2531 http://support.apple.com/kb/HT4435  View
77485 13989 CVE-2010-2531 http://svn.php.net/viewvc/php/php-src/trunk/ext/standard/tests/general_functions/var_export_error2.phpt?view=log&pathrev=301143  View
77486 13989 CVE-2010-2531 DSA-2266  View
77487 13989 CVE-2010-2531 [oss-security] 20100713 CVE request, php var_export  View
77488 13989 CVE-2010-2531 [oss-security] 20100716 Re: Re: CVE request, php var_export  View
77489 13989 CVE-2010-2531 http://www.php.net/archive/2010.php#id2010-07-22-1  View
77490 13989 CVE-2010-2531 http://www.php.net/archive/2010.php#id2010-07-22-2  View
77491 13989 CVE-2010-2531 RHSA-2010:0919  View
77492 13989 CVE-2010-2531 ADV-2010-3081  View
77493 13989 CVE-2010-2531 https://bugzilla.redhat.com/show_bug.cgi?id=617673  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36167 JVNDB-2010-001947 PHP の var_export 関数における、重要な情報を取得される脆弱性 PHP の var_export 関数には、display_errors がオフの場合でも、致命的なエラーが発生した際、ユーザに出力バッファが流出してしまうため、重要な情報を取得される脆弱性が存在します。 CVE-2010-2531 45111 CVE-2010-2531 13989 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001947.html 2010-07-22 2010-12-20 View