Lucene search

[email protected]CVE-2003-0166

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2003-0166

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

cve-2003-0166

php

denial of service

memory consumption

arbitrary code

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.11 Low

EPSS

Percentile

95.1%

JSON

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.

Affected configurations

NVD

Node

phpphpMatch4.0

phpphpMatch4.0.1

phpphpMatch4.0.2

phpphpMatch4.0.3

phpphpMatch4.0.4

phpphpMatch4.0.5

phpphpMatch4.0.6

phpphpMatch4.0.7

phpphpMatch4.1.0

phpphpMatch4.1.1

phpphpMatch4.1.2

phpphpMatch4.2.0

phpphpMatch4.2.1

phpphpMatch4.2.2

phpphpMatch4.2.3

phpphpMatch4.3.0

phpphpMatch4.3.1

CPENameOperatorVersion
php:phpphpeq4.0
php:phpphpeq4.0.1
php:phpphpeq4.0.2
php:phpphpeq4.0.3
php:phpphpeq4.0.4
php:phpphpeq4.0.5
php:phpphpeq4.0.6
php:phpphpeq4.0.7
php:phpphpeq4.1.0
php:phpphpeq4.1.1

CPE	Name	Operator	Version
php:php	php	eq	4.0
php:php	php	eq	4.0.1
php:php	php	eq	4.0.2
php:php	php	eq	4.0.3
php:php	php	eq	4.0.4
php:php	php	eq	4.0.5
php:php	php	eq	4.0.6
php:php	php	eq	4.0.7
php:php	php	eq	4.1.0
php:php	php	eq	4.1.1

Rows per page:

1-10 of 171

References

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691

marc.info/?l=bugtraq&m=104869828526885&w=2

marc.info/?l=bugtraq&m=104878100719467&w=2

marc.info/?l=bugtraq&m=104931415307111&w=2

www.securityfocus.com/bid/7197

www.securityfocus.com/bid/7198

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.11 Low

EPSS

Percentile

95.1%

JSON

Related for CVE-2003-0166

nvd1 nessus1 cvelist1