Skip to content
OpenAdvisories
Unscored DSA-1444-1 8 CVEs

php5 several issues

Published Jan 3, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 php5 5.2.0-8+etch9

Vulnerabilities 8

  • Unscored —
    CVE-2007-3799 Public exploit

    The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert …

  • Unscored —

    The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, w…

  • Unscored —

    Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive in…

  • Unscored —

    The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, whi…

  • Unscored —

    Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, relate…

  • Unscored —

    Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and attack vectors.

  • Unscored —

    The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which h…

  • Unscored —

    The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a…