Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2010-0397

Published: 16/03/2010 Updated: 10/12/2010
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Php

Vulnerability Summary

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent malicious users to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 5.3.1

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2010-0397: null pointer dereference in the xmlrpc extension
Debian Bug report logs - #573573 CVE-2010-0397: null pointer dereference in the xmlrpc extension Package: php5-xmlrpc; Maintainer for php5-xmlrpc is Debian PHP Maintainers <pkg-php-maint@listsaliothdebianorg>; Source for php5-xmlrpc is src:php5 (PTS, buildd, popcon) Reported by: Auke van Slooten <auke@muzenl> Dat ...
Ubuntu Security Notice: php5 vulnerabilities
Auke van Slooten discovered that PHP incorrectly handled certain xmlrpc requests An attacker could exploit this issue to cause the PHP server to crash, resulting in a denial of service This issue only affected Ubuntu 606 LTS, 804 LTS, 904 and 910 (CVE-2010-0397) ...

Exploits

Exploit DB: PHP 5.3.2 'xmlrpc' Extension - Multiple Remote Denial of Service Vulnerabilities
source: wwwsecurityfocuscom/bid/38708/info PHP's xmlrpc extension library is prone to multiple denial-of-service vulnerabilities because it fails to properly handle crafted XML-RPC requests Exploiting these issues allows remote attackers to cause denial-of-service conditions in the context of an application using the vulnerable library ...

References

NVD-CWE-Otherhttp://www.openwall.com/lists/oss-security/2010/03/12/5http://www.securityfocus.com/bid/38708http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573573http://www.mandriva.com/security/advisories?name=MDVSA-2010:068http://www.vupen.com/english/advisories/2010/0724http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2010//Aug/msg00003.htmlhttp://support.apple.com/kb/HT4312http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.htmlhttp://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlhttp://support.apple.com/kb/HT4435http://www.redhat.com/support/errata/RHSA-2010-0919.htmlhttp://www.vupen.com/english/advisories/2010/3081http://secunia.com/advisories/42410https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573573https://nvd.nist.govhttps://usn.ubuntu.com/989-1/https://www.exploit-db.com/exploits/33755/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
remote code executionCVE-2024-34909CVE-2024-3317SSTICVE-2024-3400CVE-2024-30051wirelessCVE-2024-4622CVE-2024-4908
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook