Skip to content

CVE-2002-2309 php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments.

HighCVSS 7.8 EPSS 4.1% PoC
Published
Updated
Exploit status
Proof-of-concept only
Sign in for asset impact Search another CVE

Description

php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments.

Affected products

ProductAffected versionsFixed in
PHP = 3.0.1 No fix listed
PHP = 3.0.2 No fix listed
PHP = 3.0.3 No fix listed
PHP = 3.0.4 No fix listed
PHP = 3.0.5 No fix listed
PHP = 3.0.6 No fix listed
PHP = 3.0.7 No fix listed
PHP = 3.0.8 No fix listed
PHP = 3.0.9 No fix listed
PHP = 3.0.10 No fix listed
PHP = 3.0.11 No fix listed
PHP = 3.0.12 No fix listed
PHP = 3.0.13 No fix listed
PHP = 3.0.14 No fix listed
PHP = 3.0.15 No fix listed
PHP = 3.0.16 No fix listed
PHP = 3.0.17 No fix listed
PHP = 3.0.18 No fix listed
PHP = 4.0 No fix listed
PHP = 4.0.1 No fix listed
PHP = 4.0.1-patch1 No fix listed
PHP = 4.0.1-patch2 No fix listed
PHP = 4.0.2 No fix listed
PHP = 4.0.3 No fix listed
PHP = 4.0.3-patch1 No fix listed
Show 13 more
ProductAffected versionsFixed in
PHP = 4.0.4 No fix listed
PHP = 4.0.5 No fix listed
PHP = 4.0.6 No fix listed
PHP = 4.0.7 No fix listed
PHP = 4.0.7-rc1 No fix listed
PHP = 4.0.7-rc2 No fix listed
PHP = 4.0.7-rc3 No fix listed
PHP = 4.1.0 No fix listed
PHP = 4.1.1 No fix listed
PHP = 4.1.2 No fix listed
PHP = 4.2.0 No fix listed
PHP = 4.2.1 No fix listed
PHP = 4.2.2 No fix listed

References