CVE-2004-0958 Information disclosure in n/a
Remote attackers can read sensitive memory contents via crafted GET, POST, or COOKIE variables ending in an open bracket due to incorrect string length calculation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0958?
CVE-2004-0958 is a medium-severity vulnerability in Php Php, published on 16 Oct 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.
Which versions are affected by CVE-2004-0958?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2004-0958?
Upgrade to a fixed version.
Is CVE-2004-0958 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-0958 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-7c8x-jx93-w7hg.