CVE-2008-3660
15.08.2008, 00:41
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.Enginsight
| Vendor | Product | Version |
|---|---|---|
| php | php | 4.4.0 |
| php | php | 4.4.1 |
| php | php | 4.4.2 |
| php | php | 4.4.3 |
| php | php | 4.4.4 |
| php | php | 4.4.5 |
| php | php | 4.4.6 |
| php | php | 4.4.7 |
| php | php | 4.4.8 |
| php | php | 5.2.0 |
| php | php | 5.2.1 |
| php | php | 5.2.2 |
| php | php | 5.2.3 |
| php | php | 5.2.4 |
| php | php | 5.2.5 |
| php | php | 5.2.6 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References