QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-0958

Back to search

CVE-2004-0958

Published: Oct 16, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.

VendorProductVersions

n/a

n/a

affected
n/a

References

20040915 [VulnWatch] PHP Vulnerability N. 1
mailing-list
x_refsource_VULNWATCH
20040915 PHP Vulnerability N. 1
mailing-list
x_refsource_BUGTRAQ
12560
third-party-advisory
x_refsource_SECUNIA
1011279
vdb-entry
x_refsource_SECTRACK
FLSA:2344
vendor-advisory
x_refsource_FEDORA
php-phpinfo-disclose-memory(17393)
vdb-entry
x_refsource_XF
oval:org.mitre.oval:def:10863
vdb-entry
signature
x_refsource_OVAL
RHSA-2004:687
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now