critical10.0
CVE-2008-2051
The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."
Impact
The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | through 5.2.5 Versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4 |
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
- http://secunia.com/advisories/30048
- http://secunia.com/advisories/30083
- http://secunia.com/advisories/30158
- http://secunia.com/advisories/30288
- http://secunia.com/advisories/30345
- http://secunia.com/advisories/30411
- http://secunia.com/advisories/30757
- http://secunia.com/advisories/30828
- http://secunia.com/advisories/30967
- http://secunia.com/advisories/31119
- http://secunia.com/advisories/31124
- http://secunia.com/advisories/31200
- http://secunia.com/advisories/31326
- http://secunia.com/advisories/32746
- http://security.gentoo.org/glsa/glsa-200811-05.xml
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178
- http://www.debian.org/security/2008/dsa-1572
- http://www.debian.org/security/2008/dsa-1578
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:125
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:126
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:127
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:128