CVE-2004-0594

{"id": "CVE-2004-0594", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-07-27T04:00:00.000", "references": [{"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html", "tags": ["Broken Link", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=108981780109154&w=2", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=108982983426031&w=2", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=109051444105182&w=2", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=109181600614477&w=2", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2004/dsa-531", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2005/dsa-669", "tags": ["Mailing List"], "source": "cve@mitre.org"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.novell.com/linux/security/advisories/2004_21_php4.html", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-392.html", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-395.html", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-405.html", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2005-816.html", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10725", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.trustix.org/errata/2004/0039/", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16693", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10896", "tags": ["Broken Link"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-367"}]}], "descriptions": [{"lang": "en", "value": "The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete."}, {"lang": "es", "value": "La funcionalidad memory_limit de PHP 4.x a 4.3.7 y 5.x a 5.0.0RC3, bajo ciertas condiciones, como cuando register_globals est\u00e1 habilitado, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n disparando un aborto por memory_limit de la funci\u00f3n zend_hash_init y sobrescribiendo un puntero de destructor de HashTable antes de que la incializaci\u00f3n de las estructuras de datos clave se haya completado."}], "lastModified": "2024-02-15T21:17:59.723", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48A4B336-2D5B-4D9B-AA87-E5266FED05BD"}, {"criteria": "cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37042CDE-E4FE-442E-891A-CD84433D36E2"}, {"criteria": "cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E586558A-ABC3-42EB-8B4D-DC92A0D695E6"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CAE037F-111C-4A76-8FFE-716B74D65EF3"}, {"criteria": "cpe:2.3:o:hp:hp-ux:b.11.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54C09E05-4FAA-4893-BF36-9DD967525C4E"}, {"criteria": "cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "972D4ABF-2E80-4902-910D-5BD0CBEC9765"}, {"criteria": "cpe:2.3:o:hp:hp-ux:b.11.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE7425AE-26A6-48A4-B883-C6220FCAC32B"}, {"criteria": "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12C73959-3E02-4847-8962-651D652800EE"}, {"criteria": "cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"}, {"criteria": "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"}, {"criteria": "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04AA8CFD-CEAD-455C-A96A-E1FE87196C86", "versionEndExcluding": "4.3.7", "versionStartIncluding": "4.0"}, {"criteria": "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E727CECE-E452-489A-A42F-5A069D6AF80E"}, {"criteria": "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "149A1FB8-593E-412B-8E1C-3E560301D500"}, {"criteria": "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"}, {"criteria": "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FC144FA-8F84-44C0-B263-B639FEAD20FB"}, {"criteria": "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "295907B4-C3DE-4021-BE3B-A8826D4379E6"}, {"criteria": "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}