NVD

Id
574  
Name
CVE-2008-0599  
Description
The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-05-05  
Modified Date
2016-12-07  
Seq
2008-0599  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
3865 574 CVE-2008-0599 http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/cgi_main.c?r1=1.267.2.15.2.50.2.12&r2=1.267.2.15.2.50.2.13&diff_format=u  View
3866 574 CVE-2008-0599 HPSBUX02342  View
3867 574 CVE-2008-0599 APPLE-SA-2008-07-31  View
3868 574 CVE-2008-0599 SSRT090085  View
3869 574 CVE-2008-0599 SSRT090192  View
3870 574 CVE-2008-0599 oval:org.mitre.oval:def:5510  View
3871 574 CVE-2008-0599 GLSA-200811-05  View
3872 574 CVE-2008-0599 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176  View
3873 574 CVE-2008-0599 VU#147027  View
3874 574 CVE-2008-0599 MDVSA-2008:127  View
3875 574 CVE-2008-0599 MDVSA-2008:128  View
3876 574 CVE-2008-0599 [oss-security] 20080502 CVE Request (PHP)  View
3877 574 CVE-2008-0599 http://www.php.net/ChangeLog-5.php  View
3878 574 CVE-2008-0599 RHSA-2008:0505  View
3879 574 CVE-2008-0599 20080523 rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl  View
3880 574 CVE-2008-0599 29009  View
3881 574 CVE-2008-0599 1019958  View
3882 574 CVE-2008-0599 SSA:2008-128-01  View
3883 574 CVE-2008-0599 USN-628-1  View
3884 574 CVE-2008-0599 ADV-2008-1412  View
3885 574 CVE-2008-0599 ADV-2008-1810  View
3886 574 CVE-2008-0599 ADV-2008-2268  View
3887 574 CVE-2008-0599 php-vector-unspecified(42137)  View
3888 574 CVE-2008-0599 https://issues.rpath.com/browse/RPL-2503  View
3889 574 CVE-2008-0599 FEDORA-2008-3864  View
3890 574 CVE-2008-0599 FEDORA-2008-3606  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46025 JVNDB-2008-001335 PHP の init_request_info() 関数における任意のコードを実行される脆弱性 PHP の sapi/cgi/cgi_main.c には、init_request_info() 関数において、PATH_TRANSLATED の長さの計算処理に不備があるために、任意のコードを実行される脆弱性が存在します。 CVE-2008-0599 30712 CVE-2008-0599 574 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001335.html 2008-05-05 2009-11-16 View