CLA-2004:847Vendor advisory
http://distro.conectiva.com.br/atualizacoes?id=a&anuncio=000847 CVE-2004-0594
PHP 4.3.7/5.0.0RC3 - 'memory_limit' Remote Overflow
Record summary
CVE-2004-0594 has a selected CVSS score of 5.1; EIP currently links 1 catalogued exploit.
Description
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPHP 4.3.7/5.0.0RC3 - 'memory_limit' Remote OverflowExploitDB exploitby Gyan ChawdharyNot analyzed1 file
References
Showing 12 of 2020040714 Advisory 11/2004: PHP memory_limit remote vulnerabilitymailing list
http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html 20040713 Advisory 11/2004: PHP memory_limit remote vulnerabilitymailing list
http://marc.info/?l=bugtraq&m=108981780109154&w=2 20040714 TSSA-2004-013 - phpmailing list
http://marc.info/?l=bugtraq&m=108982983426031&w=2 20040722 [OpenPKG-SA-2004.034] OpenPKG Security Advisory (php)mailing list
http://marc.info/?l=bugtraq&m=109051444105182&w=2 SSRT4777Vendor advisory
http://marc.info/?l=bugtraq&m=109181600614477&w=2 DSA-531Vendor advisory
http://www.debian.org/security/2004/dsa-531 DSA-669Vendor advisory
http://www.debian.org/security/2005/dsa-669 GLSA-200407-13Vendor advisory
http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml MDKSA-2004:068Vendor advisory
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068 SUSE-SA:2004:021Vendor advisory
http://www.novell.com/linux/security/advisories/2004_21_php4.html RHSA-2004:392Vendor advisory
http://www.redhat.com/support/errata/RHSA-2004-392.html