NVD

Id
14485  
Name
CVE-2010-3064  
Description
Stack-based buffer overflow in the php_mysqlnd_auth_write function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) username or (2) database name argument to the (a) mysql_connect or (b) mysqli_connect function.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-08-20  
Modified Date
2010-12-07  
Seq
2010-3064  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80129 14485 CVE-2010-3064 SUSE-SR:2010:017  View
80130 14485 CVE-2010-3064 SUSE-SR:2010:018  View
80131 14485 CVE-2010-3064 http://php-security.org/2010/05/31/mops-2010-059-php-php_mysqlnd_auth_write-stack-buffer-overflow-vulnerability/index.html  View
80132 14485 CVE-2010-3064 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?r1=298701&r2=298703&pathrev=298703  View
80133 14485 CVE-2010-3064 http://svn.php.net/viewvc?view=revision&revision=298703  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39216 JVNDB-2010-005001 PHP の Mysqlnd エクステンションにおけるスタックベースのバッファオーバーフローの脆弱性 PHP の Mysqlnd エクステンションの php_mysqlnd_auth_write 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-3064 45644 CVE-2010-3064 14485 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005001.html 2010-05-31 2012-09-25 View