CVE-2005-3319
LOW
2.1
CVSS 2.0
Description
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.
Affected products and versions
- PHP versions 4.0.0, 4.0.1, 4.0.1patch1, 4.0.1patch2, 4.0.2, 4.0.3, 4.0.3patch1, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.7rc1, 4.0.7rc2, 4.0.7rc3, 4.1.0, 4.1.1, 4.1.2, 4.2, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.10, 4.3.11, 4.4.0, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0rc1, 5.0rc2, 5.0rc3
References
- archives.neohapsis.com http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0491.html
- bugs.gentoo.org http://bugs.gentoo.org/show_bug.cgi?id=107602
- docs.info.apple.com http://docs.info.apple.com/article.html?artnum=303382
- itrc.hp.com http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522
- lists.apple.com http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html
- marc.info http://marc.info/?l=bugtraq&m=113019286208204&w=2
- secunia.com http://secunia.com/advisories/17510
- secunia.com http://secunia.com/advisories/17557
- secunia.com http://secunia.com/advisories/18198
- secunia.com http://secunia.com/advisories/19064
- secunia.com http://secunia.com/advisories/22691
- securityreason.com http://securityreason.com/securityalert/525
- www.gentoo.org http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml
- www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2005:213
- www.osvdb.org http://www.osvdb.org/20491
- www.securityfocus.com http://www.securityfocus.com/bid/15177
- www.securityfocus.com http://www.securityfocus.com/bid/16907
- www.us-cert.gov http://www.us-cert.gov/cas/techalerts/TA06-062A.html US Government Resource
- www.vupen.com http://www.vupen.com/english/advisories/2006/0791
- www.vupen.com http://www.vupen.com/english/advisories/2006/4320
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/22844
- www.ubuntu.com https://www.ubuntu.com/usn/usn-232-1/
- nvd.nist.gov Official NVD record