CVE-2002-0717

Published: Jul 26, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed.

Affected (2)

Products: Php: Php

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 4.2.0
Php Php	Version 4.2.1

References (10)

http://marc.info/?l=bugtraq&m=102734515923277&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102734516023281&w=2

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2002-21.html

Source: cve@mitre.org

US Government Resource

http://www.iss.net/security_center/static/9635.php

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/929115

Source: cve@mitre.org

US Government Resource

http://marc.info/?l=bugtraq&m=102734515923277&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=102734516023281&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cert.org/advisories/CA-2002-21.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.iss.net/security_center/static/9635.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/929115

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.