NVD

Id
71021  
Name
CVE-2004-0594  
Description
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-07-27  
Modified Date
2017-07-10  
Seq
2004-0594  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366616 71021 CVE-2004-0594 CLA-2004:847  View
366617 71021 CVE-2004-0594 20040714 Advisory 11/2004: PHP memory_limit remote vulnerability  View
366618 71021 CVE-2004-0594 20040713 Advisory 11/2004: PHP memory_limit remote vulnerability  View
366619 71021 CVE-2004-0594 20040714 TSSA-2004-013 - php  View
366620 71021 CVE-2004-0594 20040722 [OpenPKG-SA-2004.034] OpenPKG Security Advisory (php)  View
366621 71021 CVE-2004-0594 SSRT4777  View
366622 71021 CVE-2004-0594 oval:org.mitre.oval:def:10896  View
366623 71021 CVE-2004-0594 DSA-531  View
366624 71021 CVE-2004-0594 DSA-669  View
366625 71021 CVE-2004-0594 GLSA-200407-13  View
366626 71021 CVE-2004-0594 MDKSA-2004:068  View
366627 71021 CVE-2004-0594 SUSE-SA:2004:021  View
366628 71021 CVE-2004-0594 RHSA-2004:392  View
366629 71021 CVE-2004-0594 RHSA-2004:395  View
366630 71021 CVE-2004-0594 RHSA-2004:405  View
366631 71021 CVE-2004-0594 RHSA-2005:816  View
366632 71021 CVE-2004-0594 10725  View
366633 71021 CVE-2004-0594 2004-0039  View
366634 71021 CVE-2004-0594 php-memorylimit-code-execution(16693)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62941 JVNDB-2004-000283 PHP の memory_limit ディレクティブの処理における任意のコードを実行される脆弱性 PHP には、memory_limit ディレクティブの処理において、セキュリティ上不適切に割り込み処理が行われる脆弱性が存在します。 CVE-2004-0594 9021 CVE-2004-0594 71021 5.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000283.html 2004-07-14 2007-04-01 View