Skip to content
OpenAdvisories
Unscored DTSA-135-1 4 CVEs

php5 - multiple vulnerabilities

Published May 29, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 php5 5.2.5-3+lenny1

Vulnerabilities 4

  • Unscored —
    CVE-2008-0599 EPSS 11%

    The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedenc…

  • Unscored —

    Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly …

  • Unscored —

    Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.

  • Unscored —

    The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to …