CVE-2002-2309
php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments.
- Score
- CVSS 2.0 7.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2002-12-31
- Last modified
- 2024-09-17
- Weaknesses
- CWE-399
Affected products
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000605.html
- http://online.securityfocus.com/archive/1/283586
- http://www.iss.net/security_center/static/9646.php
- http://www.securityfocus.com/bid/5280
