PT-2010-2176 · Php Development Team+1 · Php+1

Raphael Geissert · Published 2010-03-16 · Updated 2010-12-10 · CVE-2010-0397

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP version 5.3.1

Description The issue is related to the xmlrpc extension in PHP, which does not properly handle a missing methodName element in the first argument to the xmlrpc decode request function. This allows context-dependent attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, and possibly have other unspecified impacts via a crafted argument.

Recommendations For PHP version 5.3.1, consider disabling the xmlrpc decode request function until a patch is available to prevent potential denial of service attacks. Restrict access to the xmlrpc extension to minimize the risk of exploitation. Avoid using the xmlrpc decode request function with untrusted input until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2010-0397

DSA-2018-1

RHSA-2010:0919

RHSA-2010_0919

Affected Products

Php

Red Hat

References · 37

• 🔥 http://securityfocus.com/bid/38708 · Exploit
• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573573 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2010/03/12/5 · Exploit
• 🔥 https://exploit-db.com/exploits/33755 · Exploit
• https://bdu.fstec.ru/vul/2022-02600 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:068 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0919.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0397 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2010-1917 · Note
• https://access.redhat.com/security/cve/CVE-2010-0397 · Note