CVE Vulnerability

CVE-2008-1734

Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating a file with a one-letter lowercase alphabetic name, which triggers interpretation of a certain unquoted [a-z] argument as a matching shell glob for this name, rather than interpretation as the literal [a-z] regular-expression string, and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server.

3.6 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

Scope

References
Link Resource
http://bugs.gentoo.org/show_bug.cgi?id=209535
http://security.gentoo.org/glsa/glsa-200804-19.xml
http://www.securityfocus.com/bid/28844
https://exchange.xforce.ibmcloud.com/vulnerabilities/41928
Configurations

Configuration 1
Information

Published : 2008-04-18 03:05

Updated : 2017-08-08 01:30

NVD link : CVE-2008-1734

Mitre link : CVE-2008-1734

Products Affected
No products.
CWE
CWE-20