CVE-2004-0594

N/A

Description

The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.

CVE Details

CVSS v3.1 ScoreN/A

Published7/27/2004

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

avaya:converged_communications_serverdebian:debian_linuxhp:hp-uxopenpkg:openpkgphp:phptrustix:secure_linux

Weaknesses (CWE)

CWE-367

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847(cve@mitre.org)

http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html(cve@mitre.org)

http://marc.info/?l=bugtraq&m=108981780109154&w=2(cve@mitre.org)

http://marc.info/?l=bugtraq&m=108982983426031&w=2(cve@mitre.org)

http://marc.info/?l=bugtraq&m=109051444105182&w=2(cve@mitre.org)

http://marc.info/?l=bugtraq&m=109181600614477&w=2(cve@mitre.org)

http://www.debian.org/security/2004/dsa-531(cve@mitre.org)

http://www.debian.org/security/2005/dsa-669(cve@mitre.org)

http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml(cve@mitre.org)

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068(cve@mitre.org)

http://www.novell.com/linux/security/advisories/2004_21_php4.html(cve@mitre.org)

http://www.redhat.com/support/errata/RHSA-2004-392.html(cve@mitre.org)

http://www.redhat.com/support/errata/RHSA-2004-395.html(cve@mitre.org)

http://www.redhat.com/support/errata/RHSA-2004-405.html(cve@mitre.org)

http://www.redhat.com/support/errata/RHSA-2005-816.html(cve@mitre.org)

http://www.securityfocus.com/bid/10725(cve@mitre.org)

http://www.trustix.org/errata/2004/0039/(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16693(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10896(cve@mitre.org)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847(af854a3a-2127-422b-91ae-364da2661108)

http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=108981780109154&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=108982983426031&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=109051444105182&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=bugtraq&m=109181600614477&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2004/dsa-531(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2005/dsa-669(af854a3a-2127-422b-91ae-364da2661108)

http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068(af854a3a-2127-422b-91ae-364da2661108)

http://www.novell.com/linux/security/advisories/2004_21_php4.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2004-392.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2004-395.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2004-405.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2005-816.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/10725(af854a3a-2127-422b-91ae-364da2661108)

http://www.trustix.org/errata/2004/0039/(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16693(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10896(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.