Vulnerability in N/a

CVE-2002-0081

Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enab…

EPSS: 0.524 (98.0th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

VU#297363 (x_refsource_CERT-VN, third-party-advisory)
MDKSA-2002:017 (vendor-advisory, x_refsource_MANDRAKE)
20020225 Re: Rumours about Apache 1.3.22 exploits (mailing-list, x_refsource_VULN-DEV)
php-file-upload-overflow(8281) (vdb-entry, x_refsource_XF)
HPSBTL0203-028 (x_refsource_HP, vendor-advisory)
20020227 Advisory 012002: PHP remote vulnerabilities (mailing-list, x_refsource_BUGTRAQ)
DSA-115 (vendor-advisory, x_refsource_DEBIAN)
20020228 TSLSA-2002-0033 - mod_php (mailing-list, x_refsource_BUGTRAQ)
www.php.net/downloads.php (x_refsource_CONFIRM)
CA-2002-05 (x_refsource_CERT, third-party-advisory)