CVE-2008-3659

{"id": "CVE-2008-3659", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-08-15T00:41:00.000", "references": [{"url": "http://bugs.gentoo.org/show_bug.cgi?id=234102", "source": "cve@mitre.org"}, {"url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html", "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html", "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=124654546101607&w=2", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=125631037611762&w=2", "source": "cve@mitre.org"}, {"url": "http://news.php.net/php.cvs/52002", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/47483", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31982", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/32148", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/32316", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/32746", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/35074", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/35650", "source": "cve@mitre.org"}, {"url": "http://security.gentoo.org/glsa/glsa-200811-05.xml", "source": "cve@mitre.org"}, {"url": "http://support.apple.com/kb/HT3549", "source": "cve@mitre.org"}, {"url": "http://wiki.rpath.com/Advisories:rPSA-2009-0035", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2008/dsa-1647", "source": "cve@mitre.org"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:021", "source": "cve@mitre.org"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:022", "source": "cve@mitre.org"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:023", "source": "cve@mitre.org"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:024", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/08/08/2", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/08/08/3", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/08/08/4", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2008/08/13/8", "source": "cve@mitre.org"}, {"url": "http://www.php.net/archive/2008.php#id2008-08-07-1", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/501376/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1020995", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/2336", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/1297", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44405", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: the scope of this issue is limited since most applications would not use an attacker-controlled delimiter, but local attacks against safe_mode are feasible."}, {"lang": "es", "value": "Un desbordamiento de b\u00fafer en la funci\u00f3n memnstr en versiones de PHP 4.4.x anteriores a 4.4.9 y en PHP 5.6 permite a atacantes provocar una denegaci\u00f3n de servicio (con caida de la aplicaci\u00f3n) y posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s del argumento delimiter de la funci\u00f3n a explotar. NOTA: el alcance de esta cuesti\u00f3n es limitado, ya que la mayor\u00eda de las aplicaciones no usan un delimitador controlado por un atacante, pero los ataques locales contra los safe_mode son viables."}], "lastModified": "2018-10-11T20:49:12.617", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"}, {"criteria": "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"}, {"criteria": "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"}, {"criteria": "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D2937B3-D034-400E-84F5-33833CE3764D"}, {"criteria": "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"}, {"criteria": "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C2AF1D9-33B6-4B2C-9269-426B6B720164"}, {"criteria": "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84B70263-37AA-4539-A286-12038A3792C6"}, {"criteria": "cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"}, {"criteria": "cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FF30D7F-353B-4496-9A89-4EF2BB279E0A"}, {"criteria": "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD02D837-FD28-4E0F-93F8-25E8D1C84A99"}, {"criteria": "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88358D1E-BE6F-4CE3-A522-83D1FA4739E3"}, {"criteria": "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"}, {"criteria": "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86767200-6C9C-4C3E-B111-0E5BE61E197B"}, {"criteria": "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B00B416D-FF23-4C76-8751-26D305F0FA0F"}, {"criteria": "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCB6CDDD-70D3-4004-BCE0-8C4723076103"}, {"criteria": "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A782CA26-9C38-40A8-92AE-D47B14D2FCE3"}], "operator": "OR"}]}], "vendorComments": [{"comment": "The PHP interpreter does not offer a reliable sandboxed security layer (as found in, say, a JVM) in which untrusted scripts can be run any script run by the PHP interpreter must be trusted with the privileges of the interpreter itself. We therefore do not classify this issue as security-sensitive since no trust boundary is crossed.\n", "lastModified": "2017-08-07T21:32:03.983", "organization": "Red Hat"}], "evaluatorComment": "Overview contains a typo, should read \"PHP 5.2 through 5.2.6\" not \"5.6 through 5.2.6\".", "sourceIdentifier": "cve@mitre.org"}