Unscored DSA-1789-1 8 CVEs

php5 - several vulnerabilities

Published May 4, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 4.0	php5	5.2.0+dfsg-8+etch15
Debian · 5.0	php5	5.2.6.dfsg.1-1+lenny3

Vulnerabilities 8

Unscored —

CVE-2008-2107

The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multip…

May 7, 2008
Unscored —

CVE-2008-2108

The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multip…

May 7, 2008
Unscored —

CVE-2008-5557

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 th…

Dec 23, 2008
Unscored —

CVE-2008-5624

PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getu…

Dec 17, 2008
Unscored —

CVE-2008-5658

Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-depende…

Dec 17, 2008
Unscored —

CVE-2008-5814

Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows rem…

Jan 2, 2009
Unscored —

CVE-2009-0754 Public exploit

PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites host…

Mar 3, 2009
Unscored —

CVE-2009-1271

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial o…

Apr 8, 2009