The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
15 Feb 2024, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Hp hp-ux
Debian debian Linux Debian Openpkg Hp Openpkg openpkg |
|
| CPE | cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:* cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:* cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:* cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:* cpe:2.3:a:avaya:integrated_management:*:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:* cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:* cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:* cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:* cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:* cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:* cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:* cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:* cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:* |
cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:* cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:* cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:* cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:* cpe:2.3:o:hp:hp-ux:b.11.22:*:*:*:*:*:*:* cpe:2.3:o:hp:hp-ux:b.11.00:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:* cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:* cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:* cpe:2.3:a:php:php:*:*:*:*:*:*:*:* cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:* cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:* |
| CWE | CWE-367 | |
| References | (CONECTIVA) http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847 - Broken Link | |
| References | (DEBIAN) http://www.debian.org/security/2004/dsa-531 - Broken Link | |
| References | (SUSE) http://www.novell.com/linux/security/advisories/2004_21_php4.html - Broken Link | |
| References | (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10896 - Broken Link | |
| References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2004-405.html - Broken Link | |
| References | (BID) http://www.securityfocus.com/bid/10725 - Broken Link, Third Party Advisory, VDB Entry | |
| References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=108981780109154&w=2 - Third Party Advisory | |
| References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2004-392.html - Broken Link | |
| References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2004-395.html - Broken Link | |
| References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=108982983426031&w=2 - Third Party Advisory | |
| References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2005-816.html - Broken Link | |
| References | (DEBIAN) http://www.debian.org/security/2005/dsa-669 - Mailing List | |
| References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=109051444105182&w=2 - Third Party Advisory | |
| References | (HP) http://marc.info/?l=bugtraq&m=109181600614477&w=2 - Third Party Advisory | |
| References | (MANDRAKE) http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068 - Broken Link | |
| References | (GENTOO) http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml - Third Party Advisory | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/16693 - Third Party Advisory, VDB Entry | |
| References | (TRUSTIX) http://www.trustix.org/errata/2004/0039/ - Broken Link | |
| References | (FULLDISC) http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html - Broken Link, URL Repurposed |
Information
Published : 2004-07-27 04:00
Updated : 2024-02-28 10:24
NVD link : CVE-2004-0594
Mitre link : CVE-2004-0594
CVE.ORG link : CVE-2004-0594
JSON object : View
Products Affected
php
- php
hp
- hp-ux
openpkg
- openpkg
avaya
- converged_communications_server
debian
- debian_linux
trustix
- secure_linux
CWE
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition