NVD

Id
71360  
Name
CVE-2004-0958  
Description
php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2004-11-03  
Modified Date
2017-07-10  
Seq
2004-0958  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368883 71360 CVE-2004-0958 20040915 [VulnWatch] PHP Vulnerability N. 1  View
368884 71360 CVE-2004-0958 20040915 PHP Vulnerability N. 1  View
368885 71360 CVE-2004-0958 oval:org.mitre.oval:def:10863  View
368886 71360 CVE-2004-0958 1011279  View
368887 71360 CVE-2004-0958 RHSA-2004:687  View
368888 71360 CVE-2004-0958 php-phpinfo-disclose-memory(17393)  View
368889 71360 CVE-2004-0958 FLSA:2344  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63061 JVNDB-2004-000403 PHP の php_variables.c におけるメモリリークの脆弱性 ------------ CVE-2004-0958 9385 CVE-2004-0958 71360 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000403.html 2004-09-18 2007-04-01 View