CVE Vulnerabilities

CVE-2008-2051

Published: May 05, 2008 | Modified: Oct 11, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
LOW

The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to incomplete multibyte chars.

Affected Software

Name Vendor Start Version End Version
Php Php * 5.2.5 (including)
Php Php 5.0.0-beta1 (including) 5.0.0-beta1 (including)
Php Php 5.0.0-beta2 (including) 5.0.0-beta2 (including)
Php Php 5.0.0-beta3 (including) 5.0.0-beta3 (including)
Php Php 5.0.0-beta4 (including) 5.0.0-beta4 (including)
Php Php 5.0.0-rc1 (including) 5.0.0-rc1 (including)
Php Php 5.0.0-rc2 (including) 5.0.0-rc2 (including)
Php Php 5.0.0-rc3 (including) 5.0.0-rc3 (including)
Php Php 5.0.1 (including) 5.0.1 (including)
Php Php 5.0.2 (including) 5.0.2 (including)
Php Php 5.0.3 (including) 5.0.3 (including)
Php Php 5.0.4 (including) 5.0.4 (including)
Php Php 5.0.5 (including) 5.0.5 (including)
Php Php 5.1.0 (including) 5.1.0 (including)
Php Php 5.1.1 (including) 5.1.1 (including)
Php Php 5.1.2 (including) 5.1.2 (including)
Php Php 5.1.3 (including) 5.1.3 (including)
Php Php 5.1.4 (including) 5.1.4 (including)
Php Php 5.1.5 (including) 5.1.5 (including)
Php Php 5.1.6 (including) 5.1.6 (including)
Php Php 5.2.0 (including) 5.2.0 (including)
Php Php 5.2.1 (including) 5.2.1 (including)
Php Php 5.2.2 (including) 5.2.2 (including)
Php Php 5.2.3 (including) 5.2.3 (including)
Php Php 5.2.4 (including) 5.2.4 (including)
Red Hat Enterprise Linux 2.1 RedHat php-0:4.1.2-2.20 *
Red Hat Enterprise Linux 3 RedHat php-0:4.3.2-48.ent *
Red Hat Enterprise Linux 4 RedHat php-0:4.3.9-3.22.12 *
Red Hat Enterprise Linux 5 RedHat php-0:5.1.6-20.el5_2.1 *
Red Hat Web Application Stack for RHEL 4 RedHat php-0:5.1.6-3.el4s1.10 *
Php5 Ubuntu dapper *
Php5 Ubuntu feisty *
Php5 Ubuntu gutsy *
Php5 Ubuntu hardy *
Php5 Ubuntu upstream *

References