PT-2002-1992 · Php · Php

Published 2002-09-24 · Updated 2017-10-10 · CVE-2002-0986

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: PHP versions 4.x through 4.2.2

Description: The issue concerns the mail function in PHP, which fails to filter ASCII control characters from its arguments. This could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a spam proxy.

Recommendations: For PHP versions 4.x through 4.2.2, update to a version that fixes this issue to prevent potential exploitation.

Fix

Related Identifiers

CVE-2002-0986

DSA-168

Affected Products

Php

References · 19

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-243.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-248.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2002_036_modphp4.html · Vendor Advisory
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-213.html · Vendor Advisory
• http://debian.org/security/2002/dsa-168 · Vendor Advisory
• http://mandrakesoft.com/security/advisories?name=MDKSA-2003:082 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0986 · Security Note
• http://redhat.com/support/errata/RHSA-2002-244.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-159.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-214.html · Vendor Advisory
• http://securityfocus.com/bid/5562 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=103011916928204&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9959 · Note