NetSight
IP …
critical10.0

CVE-2004-1019

The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untru…

Impact

The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.

Affected products

VendorProductAffected versions
OpenpkgOpenpkg
Versions 2.1, 2.2, current
PhpPhp
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5
TrustixSecure Linux
Versions 2.0, 2.1, 2.2
UbuntuUbuntu Linux
Version 4.1

Weakness classification

CWE-20

References