CVE-2004-0958: Medium severity PHP PHP vulnerability
Published Oct 16, 2004
·Updated
phpvariables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.
Affected Software
1 affected component
PHP PHP<=5.0.2
Remediation
Patch Available
Event History
Oct 16, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0958?
CVE-2004-0958 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2004-0958?
To fix CVE-2004-0958, update PHP to version 5.0.2 or later.
3
What type of attack does CVE-2004-0958 enable?
CVE-2004-0958 enables remote attackers to read sensitive memory contents.
4
Which versions of PHP are affected by CVE-2004-0958?
CVE-2004-0958 affects all PHP versions prior to 5.0.2.
5
What impact does CVE-2004-0958 have on web applications?
CVE-2004-0958 can lead to disclosure of sensitive information from web applications.