CVE-2010-2531

EUVD-2010-2535
The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
phpphp
5.2.0 ≤
𝑥
< 5.2.14
phpphp
5.3.0 ≤
𝑥
< 5.3.3
debiandebian_linux
5.0
debiandebian_linux
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
php5
dapper
Fixed 5.1.2-1ubuntu3.19
released
hardy
Fixed 5.2.4-2ubuntu5.12
released
jaunty
Fixed 5.2.6.dfsg.1-3ubuntu4.6
released
karmic
Fixed 5.2.10.dfsg.1-2ubuntu6.5
released
lucid
Fixed 5.3.2-1ubuntu4.5
released
Common Weakness Enumeration
References
http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
http://marc.info/?l=bugtraq&m=130331363227777&w=2
http://marc.info/?l=bugtraq&m=133469208622507&w=2
http://secunia.com/advisories/42410
http://support.apple.com/kb/HT4312
http://support.apple.com/kb/HT4435
http://svn.php.net/viewvc/php/php-src/trunk/ext/standard/tests/general_functions/var_export_error2.phpt?view=log&pathrev=301143
http://www.debian.org/security/2011/dsa-2266
http://www.openwall.com/lists/oss-security/2010/07/13/1
http://www.openwall.com/lists/oss-security/2010/07/16/3
http://www.php.net/archive/2010.php#id2010-07-22-1
http://www.php.net/archive/2010.php#id2010-07-22-2
http://www.redhat.com/support/errata/RHSA-2010-0919.html
http://www.vupen.com/english/advisories/2010/3081
https://bugzilla.redhat.com/show_bug.cgi?id=617673
http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
http://marc.info/?l=bugtraq&m=130331363227777&w=2
http://marc.info/?l=bugtraq&m=133469208622507&w=2
http://secunia.com/advisories/42410
http://support.apple.com/kb/HT4312
http://support.apple.com/kb/HT4435
http://svn.php.net/viewvc/php/php-src/trunk/ext/standard/tests/general_functions/var_export_error2.phpt?view=log&pathrev=301143
http://www.debian.org/security/2011/dsa-2266
http://www.openwall.com/lists/oss-security/2010/07/13/1
http://www.openwall.com/lists/oss-security/2010/07/16/3
http://www.php.net/archive/2010.php#id2010-07-22-1
http://www.php.net/archive/2010.php#id2010-07-22-2
http://www.redhat.com/support/errata/RHSA-2010-0919.html
http://www.vupen.com/english/advisories/2010/3081
https://bugzilla.redhat.com/show_bug.cgi?id=617673