Lucene search
HistoryFeb 14, 2012 - 3:55 p.m.
CVE-2012-0788
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.3
Confidence
High
EPSS
0.198
Percentile
96.3%
The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.
Affected configurations
Node
phpphpRange≤5.3.8
ORphpphpMatch5.0.0
ORphpphpMatch5.0.0beta1
ORphpphpMatch5.0.0beta2
ORphpphpMatch5.0.0beta3
ORphpphpMatch5.0.0beta4
ORphpphpMatch5.0.0rc1
ORphpphpMatch5.0.0rc2
ORphpphpMatch5.0.0rc3
ORphpphpMatch5.0.1
ORphpphpMatch5.0.2
ORphpphpMatch5.0.3
ORphpphpMatch5.0.4
ORphpphpMatch5.0.5
ORphpphpMatch5.1.1
ORphpphpMatch5.1.2
ORphpphpMatch5.1.3
ORphpphpMatch5.1.4
ORphpphpMatch5.1.5
ORphpphpMatch5.1.6
ORphpphpMatch5.2.0
ORphpphpMatch5.2.1
ORphpphpMatch5.2.2
ORphpphpMatch5.2.3
ORphpphpMatch5.2.4
ORphpphpMatch5.2.5
ORphpphpMatch5.2.6
ORphpphpMatch5.2.7
ORphpphpMatch5.2.8
ORphpphpMatch5.2.9
ORphpphpMatch5.2.10
ORphpphpMatch5.2.11
ORphpphpMatch5.2.12
ORphpphpMatch5.2.14
ORphpphpMatch5.2.15
ORphpphpMatch5.2.16
ORphpphpMatch5.2.17
ORphpphpMatch5.3.0
ORphpphpMatch5.3.1
ORphpphpMatch5.3.2
ORphpphpMatch5.3.3
ORphpphpMatch5.3.4
ORphpphpMatch5.3.5
ORphpphpMatch5.3.6
ORphpphpMatch5.3.7
Related
cvelist
cvelist
CVE-2012-0788
2012-02-14 15:00:00
cve
cve
CVE-2012-0788
2012-02-14 15:55:00
prion
prion
Session fixation
2012-02-14 15:55:00
ubuntucve
ubuntucve
CVE-2012-0788
2012-01-20 00:00:00
openvas
openvas
PHP Web Form Hash Collision Denial of Service Vulnerability - Windows
2012-01-03 00:00:00
Mandriva Update for php MDVSA-2012:065 (php)
2012-08-03 00:00:00
PHP < 5.3.9 Multiple Vulnerabilities
2012-06-14 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : php (MDVSA-2012:065)
2012-04-27 00:00:00
PHP < 5.3.9 Multiple Vulnerabilities
2012-01-13 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:065 ] php
2012-05-01 00:00:00
PHP multiple security vulnerabilities
2012-05-24 00:00:00
[ MDVSA-2012:071 ] php
2012-05-14 00:00:00
ubuntu
ubuntu
PHP regression
2012-02-13 00:00:00
PHP vulnerabilities
2012-02-10 00:00:00
suse
suse
Security update for PHP5 (important)
2012-03-24 03:08:28
update for php5 (important)
2012-03-29 15:08:14
Security update for PHP5 (important)
2012-04-12 23:08:15
osv
osv
php5 - several
2012-02-13 00:00:00
debian
debian
[SECURITY] [DSA 2408-1] php5 security update
2012-02-13 18:15:24
gentoo
gentoo
PHP: Multiple vulnerabilities
2012-09-24 00:00:00
f5
f5
Multiple PHP vulnerabilities
2012-04-05 02:07:00
SOL13518 - Multiple PHP vulnerabilities
2012-04-04 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.3
Confidence
High
EPSS
0.198
Percentile
96.3%
Related for NVD:CVE-2012-0788