Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2008-2829

Published: 23/06/2008 Updated: 09/10/2019
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Php

Vulnerability Summary

php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long IMAP request, which triggers an "rfc822.c legacy routine buffer overflow" error message, related to the rfc822_write_address function.

Vulnerable Product Search on Vulmon Subscribe to Product

php php

php php 5.2.6

php php 5.2.5

canonical ubuntu linux 6.06

canonical ubuntu linux 8.04

canonical ubuntu linux 7.10

canonical ubuntu linux 7.04

Vendor Advisories

Ubuntu Security Notice: php5 vulnerabilities
It was discovered that PHP did not properly check the length of the string parameter to the fnmatch function An attacker could cause a denial of service in the PHP interpreter if a script passed untrusted input to the fnmatch function (CVE-2007-4782) ...

References

CWE-119http://bugs.php.net/bug.php?id=42862https://bugs.gentoo.org/show_bug.cgi?id=221969http://www.openwall.com/lists/oss-security/2008/06/19/6http://www.mandriva.com/security/advisories?name=MDVSA-2008:127http://www.mandriva.com/security/advisories?name=MDVSA-2008:128http://www.openwall.com/lists/oss-security/2008/06/24/2http://www.ubuntu.com/usn/usn-628-1http://www.mandriva.com/security/advisories?name=MDVSA-2008:126http://secunia.com/advisories/31200http://osvdb.org/46641http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.htmlhttp://wiki.rpath.com/Advisories:rPSA-2009-0035http://www.securityfocus.com/bid/29829http://secunia.com/advisories/35074http://www.vupen.com/english/advisories/2009/1297http://lists.apple.com/archives/security-announce/2009/May/msg00002.htmlhttp://www.us-cert.gov/cas/techalerts/TA09-133A.htmlhttp://support.apple.com/kb/HT3549https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.htmlhttp://secunia.com/advisories/35306https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.htmlhttp://secunia.com/advisories/35650http://marc.info/?l=bugtraq&m=124654546101607&w=2http://marc.info/?l=bugtraq&m=125631037611762&w=2http://secunia.com/advisories/32746http://security.gentoo.org/glsa/glsa-200811-05.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/43357http://www.securityfocus.com/archive/1/501376/100/0/threadedhttps://usn.ubuntu.com/628-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook