Definition


New Search

PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request which allows remote attackers to cause a denial of service (resource exhaustion) and makes it easier for remote attackers to exploit local file inclusion vulnerabilities via multiple requests related to lack of support for the max_file_uploads directive.

oval:org.mitre.oval:def:10483

PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request which allows remote attackers to cause a denial of service (resource exhaustion) and makes it easier for remote attackers to exploit local file inclusion vulnerabilities via multiple requests related to lack of support for the max_file_uploads directive.

Family:
unix
Status:
ACCEPTED
Platform(s):
  • CentOS Linux 5
  • Red Hat Enterprise Linux 3
  • CentOS Linux 4
  • Oracle Linux 4
  • CentOS Linux 3
  • Oracle Linux 5
  • Red Hat Enterprise Linux 4
  • Red Hat Enterprise Linux 5
Class:
vulnerability
Reference(s):
  • CVE-2009-4017
Product(s):