{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-08-08T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: the scope of this issue is limited since most applications would not use an attacker-controlled delimiter, but local attacks against safe_mode are feasible."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-11T19:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1020995", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1020995"}, {"name": "32746", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/32746"}, {"name": "HPSBUX02465", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=125631037611762&w=2"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/kb/HT3549"}, {"name": "GLSA-200811-05", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200811-05.xml"}, {"name": "SSRT090085", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=124654546101607&w=2"}, {"name": "31982", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/31982"}, {"name": "20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/501376/100/0/threaded"}, {"name": "MDVSA-2009:024", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:024"}, {"name": "47483", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/47483"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0035"}, {"name": "35074", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/35074"}, {"name": "SSRT090192", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=125631037611762&w=2"}, {"name": "32148", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/32148"}, {"name": "APPLE-SA-2009-05-12", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"}, {"name": "[oss-security] 20080808 CVE request: php-5.2.6 overflow issues", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2008/08/08/2"}, {"name": "SUSE-SR:2008:018", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html"}, {"name": "SUSE-SR:2008:021", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html"}, {"name": "MDVSA-2009:023", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:023"}, {"name": "MDVSA-2009:022", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:022"}, {"name": "php-memnstr-bo(44405)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44405"}, {"name": "TA09-133A", "tags": ["third-party-advisory", "x_refsource_CERT"], "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"}, {"name": "[oss-security] 20080813 Re: CVE request: php-5.2.6 overflow issues", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2008/08/13/8"}, {"name": "ADV-2009-1297", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/1297"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.gentoo.org/show_bug.cgi?id=234102"}, {"name": "MDVSA-2009:021", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:021"}, {"name": "HPSBUX02431", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=124654546101607&w=2"}, {"name": "[oss-security] 20080808 Re: CVE request: php-5.2.6 overflow issues", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2008/08/08/4"}, {"name": "DSA-1647", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2008/dsa-1647"}, {"name": "ADV-2008-2336", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/2336"}, {"name": "[oss-security] 20080808 Re: CVE request: php-5.2.6 overflow issues", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2008/08/08/3"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.php.net/archive/2008.php#id2008-08-07-1"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://news.php.net/php.cvs/52002"}, {"name": "35650", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/35650"}, {"name": "32316", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/32316"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-3659", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: the scope of this issue is limited since most applications would not use an attacker-controlled delimiter, but local attacks against safe_mode are feasible."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1020995", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1020995"}, {"name": "32746", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/32746"}, {"name": "HPSBUX02465", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=125631037611762&w=2"}, {"name": "http://support.apple.com/kb/HT3549", "refsource": "CONFIRM", "url": "http://support.apple.com/kb/HT3549"}, {"name": "GLSA-200811-05", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200811-05.xml"}, {"name": "SSRT090085", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=124654546101607&w=2"}, {"name": "31982", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/31982"}, {"name": "20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/501376/100/0/threaded"}, {"name": "MDVSA-2009:024", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:024"}, {"name": "47483", "refsource": "OSVDB", "url": "http://osvdb.org/47483"}, {"name": "http://wiki.rpath.com/Advisories:rPSA-2009-0035", "refsource": "CONFIRM", "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0035"}, {"name": "35074", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/35074"}, {"name": "SSRT090192", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=125631037611762&w=2"}, {"name": "32148", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/32148"}, {"name": "APPLE-SA-2009-05-12", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"}, {"name": "[oss-security] 20080808 CVE request: php-5.2.6 overflow issues", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2008/08/08/2"}, {"name": "SUSE-SR:2008:018", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html"}, {"name": "SUSE-SR:2008:021", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html"}, {"name": "MDVSA-2009:023", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:023"}, {"name": "MDVSA-2009:022", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:022"}, {"name": "php-memnstr-bo(44405)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44405"}, {"name": "TA09-133A", "refsource": "CERT", "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"}, {"name": "[oss-security] 20080813 Re: CVE request: php-5.2.6 overflow issues", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2008/08/13/8"}, {"name": "ADV-2009-1297", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/1297"}, {"name": "http://bugs.gentoo.org/show_bug.cgi?id=234102", "refsource": "CONFIRM", "url": "http://bugs.gentoo.org/show_bug.cgi?id=234102"}, {"name": "MDVSA-2009:021", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:021"}, {"name": "HPSBUX02431", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=124654546101607&w=2"}, {"name": "[oss-security] 20080808 Re: CVE request: php-5.2.6 overflow issues", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2008/08/08/4"}, {"name": "DSA-1647", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2008/dsa-1647"}, {"name": "ADV-2008-2336", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/2336"}, {"name": "[oss-security] 20080808 Re: CVE request: php-5.2.6 overflow issues", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2008/08/08/3"}, {"name": "http://www.php.net/archive/2008.php#id2008-08-07-1", "refsource": "CONFIRM", "url": "http://www.php.net/archive/2008.php#id2008-08-07-1"}, {"name": "http://news.php.net/php.cvs/52002", "refsource": "CONFIRM", "url": "http://news.php.net/php.cvs/52002"}, {"name": "35650", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/35650"}, {"name": "32316", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/32316"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-3659", "datePublished": "2008-08-15T00:00:00", "dateReserved": "2008-08-12T00:00:00", "dateUpdated": "2018-10-11T19:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "BB25CFBB-347C-479E-8853-F49DD6CBD7D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "4D2937B3-D034-400E-84F5-33833CE3764D", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "4C2AF1D9-33B6-4B2C-9269-426B6B720164", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "84B70263-37AA-4539-A286-12038A3792C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "2E46E4B4-808C-4B47-81D9-EC2B02A5E57B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "6FF30D7F-353B-4496-9A89-4EF2BB279E0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "CD02D837-FD28-4E0F-93F8-25E8D1C84A99", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "88358D1E-BE6F-4CE3-A522-83D1FA4739E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "86767200-6C9C-4C3E-B111-0E5BE61E197B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "B00B416D-FF23-4C76-8751-26D305F0FA0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "CCB6CDDD-70D3-4004-BCE0-8C4723076103", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "A782CA26-9C38-40A8-92AE-D47B14D2FCE3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: the scope of this issue is limited since most applications would not use an attacker-controlled delimiter, but local attacks against safe_mode are feasible."}, {"lang": "es", "value": "Un desbordamiento de b\u00fafer en la funci\u00f3n memnstr en versiones de PHP 4.4.x anteriores a 4.4.9 y en PHP 5.6 permite a atacantes provocar una denegaci\u00f3n de servicio (con caida de la aplicaci\u00f3n) y posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s del argumento delimiter de la funci\u00f3n a explotar. NOTA: el alcance de esta cuesti\u00f3n es limitado, ya que la mayor\u00eda de las aplicaciones no usan un delimitador controlado por un atacante, pero los ataques locales contra los safe_mode son viables."}], "evaluatorComment": "Overview contains a typo, should read \"PHP 5.2 through 5.2.6\" not \"5.6 through 5.2.6\".", "id": "CVE-2008-3659", "lastModified": "2018-10-11T20:49:12.617", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-08-15T00:41:00.000", "references": [{"source": "cve@mitre.org", "url": "http://bugs.gentoo.org/show_bug.cgi?id=234102"}, {"source": "cve@mitre.org", "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"}, {"source": "cve@mitre.org", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html"}, {"source": "cve@mitre.org", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=124654546101607&w=2"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=125631037611762&w=2"}, {"source": "cve@mitre.org", "url": "http://news.php.net/php.cvs/52002"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/47483"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/31982"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/32148"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/32316"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/32746"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/35074"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/35650"}, {"source": "cve@mitre.org", "url": "http://security.gentoo.org/glsa/glsa-200811-05.xml"}, {"source": "cve@mitre.org", "url": "http://support.apple.com/kb/HT3549"}, {"source": "cve@mitre.org", "url": "http://wiki.rpath.com/Advisories:rPSA-2009-0035"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2008/dsa-1647"}, {"source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:021"}, {"source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:022"}, {"source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:023"}, {"source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:024"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2008/08/08/2"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2008/08/08/3"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2008/08/08/4"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2008/08/13/8"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.php.net/archive/2008.php#id2008-08-07-1"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/501376/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1020995"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/2336"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2009/1297"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44405"}], "sourceIdentifier": "cve@mitre.org", "vendorComments": [{"comment": "The PHP interpreter does not offer a reliable sandboxed security layer (as found in, say, a JVM) in which untrusted scripts can be run any script run by the PHP interpreter must be trusted with the privileges of the interpreter itself. We therefore do not classify this issue as security-sensitive since no trust boundary is crossed.\n", "lastModified": "2017-08-07T21:32:03.983", "organization": "Red Hat"}], "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}