CVE-2002-2214: Medium severity PHP PHP vulnerability
Published Dec 31, 2002
·Updated
The phpifimapmimeheaderdecode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long "To" header.
Affected Software
3 affected components
PHP PHP=4.2.0
PHP PHP=4.2.1
PHP PHP=4.2
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Jun 15, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2214?
CVE-2002-2214 has a medium severity level as it allows remote attackers to cause a denial of service.
2
How do I fix CVE-2002-2214?
To fix CVE-2002-2214, upgrade your PHP version to 4.2.2 or later.
3
What versions of PHP are affected by CVE-2002-2214?
CVE-2002-2214 affects PHP versions 4.2.0, 4.2.1, and the 4.2 development series.
4
Can CVE-2002-2214 lead to data loss?
CVE-2002-2214 does not lead to data loss, but it can render the application unavailable due to a crash.
5
Is CVE-2002-2214 still relevant today?
CVE-2002-2214 is considered legacy but is relevant for systems still running affected versions of PHP.