NetSight
IP …
medium5.1Public exploit code

CVE-2004-0594

The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.

Affected products

VendorProductAffected versions
OpenpkgOpenpkg
Versions 2.0, 2.1
AvayaConverged Communications Server
Version 2.0
DebianDebian Linux
Version 3.0
HpHp-Ux
Versions b.11.00, b.11.11, b.11.22, b.11.23
TrustixSecure Linux
Versions 1.5, 2.0, 2.1
PhpPhp
from 4.0 before 4.3.7
Version 5.0.0

Weakness classification

CWE-367

References