Vulnerability in Avaya Converged Communications Server
CVE-2004-0594
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
Vulnerability class: TOCTOU (Time-of-Check to Time-of-Use)
EPSS: 0.549 (99.0th percentile) — read the EPSS interpretation.
Affected products
- Avaya Converged_communications_server — versions 2.0
- Hp Hp-ux — versions b.11.00, b.11.11, b.11.22
- Openpkg — versions 2.0, 2.1
- Php — versions 5.0.0
- Trustix Secure_linux — versions 1.5, 2.0, 2.1
- Debian Debian_linux — versions 3.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, x_refsource_TRUSTIX, Broken Link)
- cve@mitre.org (mailing-list, URL Repurposed, x_refsource_FULLDISC, Broken Link)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA, Broken Link)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory)
- cve@mitre.org (vendor-advisory, Mailing List, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Broken Link)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Broken Link)
- cve@mitre.org (Broken Link, x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Broken Link)
- cve@mitre.org (vendor-advisory, Broken Link, x_refsource_DEBIAN)