CVE-2004-0958

php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an…

published October 16, 2004

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09730 · 95.5th percentile
Published
2004-10-16T04:00Z
EPSS history
Timeline
  • 16 OCT 04:00Z
    php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an…
    cvelistv5