Skip to content
OpenAdvisories
Unscored DSA-1331-1 3 CVEs

php4 - several vulnerabilities

Published Jul 7, 2007 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 php4 4:4.3.10-22
Debian · 4.0 php4 6:4.4.4-8+etch4

Vulnerabilities 3

  • Unscored —

    Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers v…

  • Unscored —

    Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dep…

  • Unscored —

    Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remo…