CVE-2000-0967: Critical severity PHP PHP vulnerability
Published Dec 19, 2000
·Updated
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
Affected Software
2 affected components
PHP PHP=3.0
PHP PHP=4.0
Remediation
Patch Available
Event History
Dec 19, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0967?
CVE-2000-0967 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2000-0967?
To fix CVE-2000-0967, upgrade to a more secure version of PHP, preferably PHP 5 or later.
3
What impact does CVE-2000-0967 have on my system?
CVE-2000-0967 can allow remote attackers to execute arbitrary commands on your server by exploiting improper input handling.
4
Which versions of PHP are affected by CVE-2000-0967?
CVE-2000-0967 affects PHP versions 3.x and 4.x.
5
Can I mitigate CVE-2000-0967 without upgrading PHP?
While the best solution is to upgrade PHP, you can mitigate CVE-2000-0967 by implementing strict input validation and sanitization.