CVSS: 7.5EPSS: 12%CPEs: 1EXPL: 3CVE-2003-0172 – PHP 4.3.7 - 'openlog()' Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2003-0172
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument. Desbordamiento de búfer en la función openlog de PHP 4.3.1 en Windows y posiblemente en otros Sistemas Operativos, permie a atacantes remotos causar la caída del sistema y posiblemente la ejecución de código arbitrario mediante un argumento nombre_de_fichero (filename) largo. • https://www.exploit-db.com/exploits/729 https://github.com/cyberdesu/Remote-Buffer-overflow-CVE-2003-0172 http://marc.info/?l=bugtraq&m=104878149020152&w=2 http://marc.info/?l=bugtraq&m=104931415307111&w=2 http://www.osvdb.org/2113 http://www.securityfocus.com/archive/1/316583 http://www.securityfocus.com/archive/1/385238 http://www.securityfocus.com/bid/7210 https://exchange.xforce.ibmcloud.com/vulnerabilities/11637 •
CVSS: 7.5EPSS: 8%CPEs: 17EXPL: 5CVE-2003-0166 – PHP 4.x - 'socket_recv()' Signed Integer Memory Corruption
https://notcve.org/view.php?id=CVE-2003-0166
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions. • https://www.exploit-db.com/exploits/22425 https://www.exploit-db.com/exploits/22426 https://www.exploit-db.com/exploits/22419 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691 http://marc.info/?l=bugtraq&m=104869828526885&w=2 http://marc.info/?l=bugtraq&m=104878100719467&w=2 http://marc.info/?l=bugtraq&m=104931415307111&w=2 http://www.securityfocus.com/bid/7197 http://www.securityfocus.com/bid/7198 •