NVD

Id
51289  
Name
CVE-2009-4143  
Description
PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-12-21  
Modified Date
2011-07-18  
Seq
2009-4143  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260175 51289 CVE-2009-4143 APPLE-SA-2010-03-29-1  View
260176 51289 CVE-2009-4143 SSRT100152  View
260177 51289 CVE-2009-4143 oval:org.mitre.oval:def:7439  View
260178 51289 CVE-2009-4143 http://support.apple.com/kb/HT4077  View
260179 51289 CVE-2009-4143 DSA-2001  View
260180 51289 CVE-2009-4143 SSRT100219  View
260181 51289 CVE-2009-4143 MDVSA-2010:045  View
260182 51289 CVE-2009-4143 http://www.php.net/ChangeLog-5.php  View
260183 51289 CVE-2009-4143 http://www.php.net/releases/5_2_12.php  View
260184 51289 CVE-2009-4143 37390  View
260185 51289 CVE-2009-4143 ADV-2009-3593  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41467 JVNDB-2009-002474 PHP におけるスーパーグローバル配列 SESSION の割り込み領域が破壊される脆弱性 PHP には、セッションデータを適切に処理しないため、スーパーグローバル配列 SESSION の 割り込み領域の破壊、および session.save_path ディレクティブに関連した影響および攻撃の脆弱性が存在します。 CVE-2009-4143 41574 CVE-2009-4143 51289 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002474.html 2009-12-21 2010-12-15 View