PT-2002-1992 · Php · Php

Publicado 2002-09-24 · Atualizado 2017-10-10 · CVE-2002-0986

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: PHP versions 4.x through 4.2.2

Description: The issue concerns the mail function in PHP, which fails to filter ASCII control characters from its arguments. This could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a spam proxy.

Recommendations: For PHP versions 4.x through 4.2.2, update to a version that fixes this issue to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2002-0986

DSA-168

Produtos afetados

Php

Referências · 19

• http://marc.info/?l=bugtraq&m=103011916928204&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9959 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2002-243.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2002-248.html · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2002_036_modphp4.html · Aviso do Fabricante
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2002-213.html · Aviso do Fabricante
• http://kb.cert.org/vuls/id/410609 · Nota
• http://debian.org/security/2002/dsa-168 · Aviso do Fabricante
• http://mandrakesoft.com/security/advisories?name=MDKSA-2003:082 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0986 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2002-244.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2003-159.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0986 · Nota