Description
CRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to inject arbitrary e-mail headers via an e-mail address with a '\n' character, which causes a regular expression to ignore the subsequent part of the address string.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | php5 | 5.2.0-10+lenny1 | DTSA-39-1 |
| Debian 4.0 | php5 | 5.2.0-8+etch3 | DSA-1283-1 |
Advisories 2
- DTSA-39-1 php5 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1283-1 php5 Debian Security (DSA / DLA) · Mar 9, 2026
References
- 26231 third-party-advisory
- 25056 third-party-advisory
- 27110 third-party-advisory
- DSA-1283 vendor-advisory
- 33962 vdb-entry
- GLSA-200705-19 vendor-advisory
- ADV-2007-2016 vdb-entry
- php-filtervalidateemail-header-injection(33510) vdb-entry
- GLSA-200710-02 vendor-advisory
- oval:org.mitre.oval:def:6067 vdb-entry signature
- 25062 third-party-advisory
- http://www.php-security.org/MOPB/PMOPB-45-2007.html
- FEDORA-2007-2215 vendor-advisory
- 24824 third-party-advisory
- 2007-0023 vendor-advisory
- USN-455-1 vendor-advisory
- ADV-2007-3386 vdb-entry
- 27037 third-party-advisory
- SSA:2007-152-01 vendor-advisory
- http://www.php.net/releases/5_2_3.php
- SSRT071447 vendor-advisory
- 25535 third-party-advisory
- 27102 third-party-advisory
- 25445 third-party-advisory
- 23359 vdb-entry
- 25057 third-party-advisory
- SUSE-SA:2007:032 vendor-advisory