NVD

Id
79982  
Name
CVE-2002-0986  
Description
The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-05  
Published
2002-09-24  
Modified Date
2016-10-17  
Seq
2002-0986  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
398809 79982 CVE-2002-0986 CSSA-2003-008.0  View
398810 79982 CVE-2002-0986 CLA-2002:545  View
398811 79982 CVE-2002-0986 20020823 PHP: Bypass safe_mode and inject ASCII control chars with mail()  View
398812 79982 CVE-2002-0986 20030707 [OpenPKG-SA-2003.032] OpenPKG Security Advisory (php)  View
398813 79982 CVE-2002-0986 DSA-168  View
398814 79982 CVE-2002-0986 VU#410609  View
398815 79982 CVE-2002-0986 MDKSA-2003:082  View
398816 79982 CVE-2002-0986 SuSE-SA:2002:036  View
398817 79982 CVE-2002-0986 RHSA-2002:213  View
398818 79982 CVE-2002-0986 RHSA-2002:214  View
398819 79982 CVE-2002-0986 RHSA-2002:243  View
398820 79982 CVE-2002-0986 RHSA-2002:244  View
398821 79982 CVE-2002-0986 RHSA-2002:248  View
398822 79982 CVE-2002-0986 RHSA-2003:159  View
398823 79982 CVE-2002-0986 5562  View
398824 79982 CVE-2002-0986 php-mail-ascii-injection(9959)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63945 JVNDB-2002-000272 PHP の mail() 関数における ASCII 制御文字の不適切なフィルタリングの脆弱性 PHP に実装されている mail() 関数に、引数として意図的に ASCII 制御文字を渡された場合に、適切なフィルタリングが行われないことにより、メールヘッダ、及び、メール本文を改ざんすることが可能な脆弱性が存在します。 CVE-2002-0986 5374 CVE-2002-0986 79982 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000272.html 2002-11-04 2007-04-01 View