mod_php - buffer overflow [LWN.net]

Package(s):

mod_php php

CVE #(s):

CAN-2002-1396

Created:

January 13, 2003

Updated:

February 20, 2003

Description:

The wordwrap() function on user-supplied input may allow a specially-crafted input to overflow the allocated buffer and overwrite the heap. There are no known exploits, but an exploit is theoretically possible.

Read the full advisory at http://marc.theaimsgroup.com/?l=bugtraq&m=104102689503192&w=2

Alerts:

Mandrake	MDKSA-2003:019	2003-02-19
EnGarde	ESA-20030219-003	2003-02-19
Red Hat	RHSA-2003:017-06	2003-02-04
OpenPKG	OpenPKG-SA-2003.005	2003-01-22
Gentoo	200301-8	2003-01-13

(Log in to post comments)