Skip to content
OpenAdvisories
Unscored DSA-1578-1 5 CVEs

php4 - several vulnerabilities

Published May 17, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 php4 6:4.4.4-8+etch6

Vulnerabilities 5

  • Unscored —
    CVE-2007-3799 Public exploit

    The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert …

  • Unscored —
    CVE-2007-3806 Public exploit EPSS 11%

    The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arb…

  • Unscored —
    CVE-2007-3998

    The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, w…

  • Unscored —
    CVE-2007-4657

    Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive in…

  • Unscored —
    CVE-2008-2051

    The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to …