National Vulnerability Database (CVE-2002-0717)

National Cyber-Alert System Vulnerability Summary: CVE-2002-0717
Orirignal release date: 2002-07-26 Source: US-CERT/NIST ### Overview PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed. ### Impact CVSS Severity: 8 (High) Range: remote Authentication: design Impact Type: avail,sec_prot other="1" ### Reference to Advisories, Solutions, and Tools External Source: The Aims Group Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: The Aims Group Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: CERT Name: CA-2002-21 Hyperlink: http://www.cert.org/advisories/CA-2002-21.html External Source: CERT-VN Name: VU#929115 Hyperlink: http://www.kb.cert.org/vuls/id/929115 External Source: XF Name: php-multipart-handler-bo(9635) Hyperlink: http://www.iss.net/security_center/static/9635.php ### Vulnerable Software and Vendor PHP (PHP) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0717