CVE-2008-2050 Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | <= 5.2.5 | No fix listed |
| PHP | = 5.0.0-beta1 | No fix listed |
| PHP | = 5.0.0-beta2 | No fix listed |
| PHP | = 5.0.0-beta3 | No fix listed |
| PHP | = 5.0.0-beta4 | No fix listed |
| PHP | = 5.0.0-rc1 | No fix listed |
| PHP | = 5.0.0-rc2 | No fix listed |
| PHP | = 5.0.0-rc3 | No fix listed |
| PHP | = 5.0.1 | No fix listed |
| PHP | = 5.0.2 | No fix listed |
| PHP | = 5.0.3 | No fix listed |
| PHP | = 5.0.4 | No fix listed |
| PHP | = 5.0.5 | No fix listed |
| PHP | = 5.1.0 | No fix listed |
| PHP | = 5.1.1 | No fix listed |
| PHP | = 5.1.2 | No fix listed |
| PHP | = 5.1.3 | No fix listed |
| PHP | = 5.1.4 | No fix listed |
| PHP | = 5.1.5 | No fix listed |
| PHP | = 5.1.6 | No fix listed |
| PHP | = 5.2.0 | No fix listed |
| PHP | = 5.2.1 | No fix listed |
| PHP | = 5.2.2 | No fix listed |
| PHP | = 5.2.3 | No fix listed |
| PHP | = 5.2.4 | No fix listed |
References
- cvs.php.net exploit
- APPLE-SA-2008-07-31 vendor-advisory
- SUSE-SR:2008:014 vendor-advisory
- 30048 third-party-advisory vendor-advisory
- 30083 third-party-advisory vendor-advisory
- 30158 third-party-advisory vendor-advisory
- 30345 third-party-advisory vendor-advisory
- 30967 third-party-advisory vendor-advisory
- 31200 third-party-advisory vendor-advisory
- 31326 third-party-advisory vendor-advisory
- 32746 third-party-advisory
- GLSA-200811-05 vendor-advisory
- wiki.rpath.com
- DSA-1572 patch vendor-advisory
- MDVSA-2009:022 vendor-advisory
- MDVSA-2009:023 vendor-advisory
- [oss-security] 20080502 CVE Request (PHP) mailing-list
- www.php.net patch vendor-advisory
- 20080523 rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl mailing-list
- 29009 patch vdb-entry
- SSA:2008-128-01 vendor-advisory
- USN-628-1 vendor-advisory
- ADV-2008-1412 vdb-entry vendor-advisory
- ADV-2008-2268 vdb-entry vendor-advisory
- php-fastcgisapi-bo(42133) vdb-entry
- issues.rpath.com