Vulnerability Details CVE-2002-2309
php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.053
EPSS Ranking 90.0%
CVSS Severity
CVSS v2 Score 7.8
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000605.html
- http://online.securityfocus.com/archive/1/283586
- http://www.iss.net/security_center/static/9646.php
- http://www.securityfocus.com/bid/5280
- http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000605.html
- http://online.securityfocus.com/archive/1/283586
- http://www.iss.net/security_center/static/9646.php
- http://www.securityfocus.com/bid/5280
Products affected by CVE-2002-2309
-
cpe:2.3:a:php:php:3.0.1
-
cpe:2.3:a:php:php:3.0.10
-
cpe:2.3:a:php:php:3.0.11
-
cpe:2.3:a:php:php:3.0.12
-
cpe:2.3:a:php:php:3.0.13
-
cpe:2.3:a:php:php:3.0.14
-
cpe:2.3:a:php:php:3.0.15
-
cpe:2.3:a:php:php:3.0.16
-
cpe:2.3:a:php:php:3.0.17
-
cpe:2.3:a:php:php:3.0.18
-
cpe:2.3:a:php:php:3.0.2
-
cpe:2.3:a:php:php:3.0.3
-
cpe:2.3:a:php:php:3.0.4
-
cpe:2.3:a:php:php:3.0.5
-
cpe:2.3:a:php:php:3.0.6
-
cpe:2.3:a:php:php:3.0.7
-
cpe:2.3:a:php:php:3.0.8
-
cpe:2.3:a:php:php:3.0.9
-
cpe:2.3:a:php:php:4.0
-
cpe:2.3:a:php:php:4.0.1
-
cpe:2.3:a:php:php:4.0.2
-
cpe:2.3:a:php:php:4.0.3
-
cpe:2.3:a:php:php:4.0.4
-
cpe:2.3:a:php:php:4.0.5
-
cpe:2.3:a:php:php:4.0.6
-
cpe:2.3:a:php:php:4.0.7
-
cpe:2.3:a:php:php:4.1.0
-
cpe:2.3:a:php:php:4.1.1
-
cpe:2.3:a:php:php:4.1.2
-
cpe:2.3:a:php:php:4.2.0
-
cpe:2.3:a:php:php:4.2.1
-
cpe:2.3:a:php:php:4.2.2