eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service (Apache httpd segmentation fault) via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a memory addressing error.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ez_publish | Ez | * | 3.8.0 (including) |
| Ez_publish | Ez | 3.5.0 (including) | 3.5.0 (including) |
| Ez_publish | Ez | 3.5.1 (including) | 3.5.1 (including) |
| Ez_publish | Ez | 3.5.2 (including) | 3.5.2 (including) |
| Ez_publish | Ez | 3.5.3 (including) | 3.5.3 (including) |
| Ez_publish | Ez | 3.5.4 (including) | 3.5.4 (including) |
| Ez_publish | Ez | 3.5.5 (including) | 3.5.5 (including) |
| Ez_publish | Ez | 3.5.6 (including) | 3.5.6 (including) |
| Ez_publish | Ez | 3.6.0 (including) | 3.6.0 (including) |
| Ez_publish | Ez | 3.6.1 (including) | 3.6.1 (including) |
| Ez_publish | Ez | 3.6.2 (including) | 3.6.2 (including) |
| Ez_publish | Ez | 3.6.3 (including) | 3.6.3 (including) |
| Ez_publish | Ez | 3.6.4 (including) | 3.6.4 (including) |
| Ez_publish | Ez | 3.7.0 (including) | 3.7.0 (including) |
| Ez_publish | Ez | 3.7.1 (including) | 3.7.1 (including) |
| Ez_publish | Ez | 3.7.2 (including) | 3.7.2 (including) |