NVD

Id
1674  
Name
CVE-2008-1734  
Description
Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating a file with a one-letter lowercase alphabetic name, which triggers interpretation of a certain unquoted [a-z] argument as a matching shell glob for this name, rather than interpretation as the literal [a-z] regular-expression string, and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-04-18  
Modified Date
2008-09-05  
Seq
2008-1734  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10871 1674 CVE-2008-1734 http://bugs.gentoo.org/show_bug.cgi?id=209535  View
10872 1674 CVE-2008-1734 GLSA-200804-19  View
10873 1674 CVE-2008-1734 28844  View
10874 1674 CVE-2008-1734 phptoolkit-phpselect-dos(41928)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47623 JVNDB-2008-002933 Gentoo Linux の PHP Toolkit におけるサービス運用妨害 (DoS) の脆弱性 Gentoo Linux の PHP Toolkit は、解釈矛盾が発生するため、サービス運用妨害 (PHP の停止) 状態となる、および PHP スクリプトのコンテンツを読まれる脆弱性が存在します。 CVE-2008-1734 31847 CVE-2008-1734 1674 3.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002933.html 2008-04-17 2012-06-26 View