Skip to content
OpenAdvisories
Unscored DTSA-188-1 5 CVEs

php5 - several vulnerabilities

Published Jan 28, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 php5 5.2.6.dfsg.1-1+lenny2

Vulnerabilities 5

  • Unscored —
    CVE-2008-5557

    Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 th…

  • Unscored —
    CVE-2008-5624

    PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getu…

  • Unscored —
    CVE-2008-5658

    Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-depende…

  • Unscored —
    CVE-2008-7068

    The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service (file tru…

  • Unscored —
    CVE-2009-1272

    The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to ca…