Lucene search
Redhat.comRH:CVE-2009-2626HistoryOct 30, 2015 - 10:18 a.m.
CVE-2009-2626
2015-10-3010:18:04
redhat.com
access.redhat.com
7
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
AI Score
6.7
Confidence
Low
EPSS
0.062
Percentile
93.6%
The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore function to restore the variable.
Related
f5
f5
SOL13231 - PHP vulnerability CVE-2009-2626
2011-11-21 00:00:00
K13231 : PHP vulnerability CVE-2009-2626
2013-09-09 00:00:00
packetstorm
packetstorm
PHP ini_restore Memory Disclosure
2009-12-04 00:00:00
cvelist
cvelist
CVE-2009-2626
2022-10-03 16:24:08
prion
prion
Information disclosure
2009-12-01 16:30:00
nvd
nvd
CVE-2009-2626
2009-12-01 16:30:01
cve
cve
CVE-2009-2626
2022-10-03 16:24:08
seebug
seebug
PHP ini_restore()ĺ
ĺ俥ćŻćłé˛ćźć´
2009-11-30 00:00:00
ubuntucve
ubuntucve
CVE-2009-2626
2009-12-01 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : php (MDVSA-2010:008)
2010-01-18 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : php5 vulnerabilities (USN-882-1)
2010-01-14 00:00:00
Debian DSA-1940-1 : php5 - multiple issues
2010-02-24 00:00:00
openvas
openvas
PHP Multiple Vulnerabilities (Dec 2009)
2009-12-04 00:00:00
Mandriva Update for php MDVSA-2010:008 (php)
2010-01-19 00:00:00
Mandriva Update for php MDVSA-2010:008 (php)
2010-01-19 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2010-01-13 00:00:00
osv
osv
php5 - multiple issues
2009-11-25 00:00:00
debian
debian
[SECURITY] [DSA-1940-1] New php5 packages fix several issues
2009-11-25 21:48:09
[SECURITY] [DSA-1940-1] New php5 packages fix several issues
2009-11-25 21:48:09
gentoo
gentoo
PHP: Multiple vulnerabilities
2010-01-05 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
AI Score
6.7
Confidence
Low
EPSS
0.062
Percentile
93.6%
Related for RH:CVE-2009-2626