Home  >  CVE-2002-0717
CVE Details for CVE: CVE-2002-0717
Summary
PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed.
Timestamps
Last major update 18-10-2016 - 02:21
Published 26-07-2002 - 04:00
Last modified 18-10-2016 - 02:21
References
Vulnerable Configurations
  • cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
7.5
Impact
6.4
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bugtraq
  • 20020722 Advisory 02/2002: PHP remote vulnerability
  • 20020722 PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1
cert CA-2002-21
cert-vn VU#929115
xf php-multipart-handler-bo(9635)