CVE-2003-1302: Medium severity PHP PHP vulnerability
Published Dec 31, 2003
·Updated
The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a (1) To or (2) From header with an address that contains a large number of "\" (backslash) characters.
Affected Software
6 affected components
PHP PHP=4.2.0
PHP PHP=4.3.0
PHP PHP=4.2.2
PHP PHP=4.2.3
PHP PHP=4.2.1
PHP PHP=4.2
Remediation
Patch Available
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Jun 15, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1302?
The severity of CVE-2003-1302 is classified as a denial of service vulnerability.
2
How do I fix CVE-2003-1302?
To mitigate CVE-2003-1302, upgrade to PHP version 4.3.1 or later.
3
What versions of PHP are affected by CVE-2003-1302?
CVE-2003-1302 affects PHP versions 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 4.3.0.
4
What does CVE-2003-1302 allow remote attackers to do?
CVE-2003-1302 allows remote attackers to cause a denial of service via specially crafted email headers.
5
Is CVE-2003-1302 still a threat today?
CVE-2003-1302 is primarily a concern for systems still using the outdated PHP versions it impacts.