Back to search
CVE-2000-0967
Published: Jan 22, 2001
Modified: Aug 8, 2024
PUBLISHED
Description
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
RHSA-2000:095
vendor-advisory
x_refsource_REDHAT
RHSA-2000:088
vendor-advisory
x_refsource_REDHAT
A101200-1
vendor-advisory
x_refsource_ATSTAKE
CSSA-2000-037.0
vendor-advisory
x_refsource_CALDERA
MDKSA-2000:062
vendor-advisory
x_refsource_MANDRAKE
php-logging-format-string(5359)
vdb-entry
x_refsource_XF
20001012 Conectiva Linux Security Announcement - mod_php3
mailing-list
x_refsource_BUGTRAQ
1786
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now