7.5
CVSSv2

CVE-2002-0081

Published: 08/03/2002 Updated: 18/10/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and previous versions, and (2) php3_mime_split in PHP 3.0.x allows remote malicious users to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 3.0

php php 4.0.6

php php 4.1.0

php php 4.1.1

Vendor Advisories

Stefan Esser, who is also a member of the PHP team, found several flaws in the way PHP handles multipart/form-data POST requests (as described in RFC1867) known as POST fileuploads Each of the flaws could allow an attacker to execute arbitrary code on the victim's system For PHP3 flaws contain a broken boundary check and an arbitrary heap overflo ...