Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain…
Priority MEDIUM 49Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.
Why it matters now
EPSS 0.03402 88th percentileScored 2026-11-07
Fix Fixed Red Hat: 5 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 77
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:php:php:*:*:*:*:*:*:*:* | up to 5.2.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:* | 3.0.1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:* | 3.0.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:* | 3.0.3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:* | 3.0.4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:* | 3.0.5 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:* | 3.0.6 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:* | 3.0.7 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:* | 3.0.8 | Vulnerable | PHP |
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:* Versions up to 5.2.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:* Versions 3.0.6 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:* Versions 3.0.7 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:* Versions 3.0.8 Vulnerable ·PHP
Show 67 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:* | 3.0.9 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:* | 3.0.10 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:* | 3.0.11 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:* | 3.0.12 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:* | 3.0.13 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:* | 3.0.14 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:* | 3.0.15 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:* | 3.0.16 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:* | 3.0.17 | Vulnerable | PHP |
| cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:* | 3.0.18 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:* | 4.0.1 patch1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:* | 4.0.1 patch2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:* | 4.0.3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:* | 4.0.3 patch1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:* | 4.0.4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:* | 4.0.5 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:* | 4.0.6 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:* | 4.0.7 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:* | 4.0.7 rc1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:* | 4.0.7 rc2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:* | 4.0.7 rc3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:* | 4.1.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:* | 4.1.1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:* | 4.1.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:* | 4.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:* | 4.2.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:* | 4.2.1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:* | 4.2.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:* | 4.2.3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:* | 4.3.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:* | 4.3.1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:* | 4.3.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:* | 4.3.3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:* | 4.3.4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:* | 4.3.5 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:* | 4.3.6 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:* | 4.3.7 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:* | 4.3.8 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:* | 4.3.9 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:* | 4.3.10 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:* | 4.3.11 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:* | 4.4.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:* | 4.4.1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:* | 4.4.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:* | 4.4.3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:* | 4.4.4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:* | 5.0 rc1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:* | 5.0 rc2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:* | 5.0 rc3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:* | 5.0.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:* | 5.0.1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:* | 5.0.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:* | 5.0.3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:* | 5.0.4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:* | 5.0.5 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:* | 5.1.0 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:* | 5.1.1 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:* | 5.1.2 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:* | 5.1.3 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:* | 5.1.4 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:* | 5.1.5 | Vulnerable | PHP |
| cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:* | 5.1.6 | Vulnerable | PHP |
| cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Trustix |
| cpe:2.3:o:trustix:secure_linux:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Trustix |
- cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:* Versions 3.0.9 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:* Versions 3.0.10 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:* Versions 3.0.11 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:* Versions 3.0.12 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:* Versions 3.0.13 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:* Versions 3.0.14 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:* Versions 3.0.15 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:* Versions 3.0.16 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:* Versions 3.0.17 Vulnerable ·PHP
- cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:* Versions 3.0.18 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:* Versions 4.0.1 patch1 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:* Versions 4.0.1 patch2 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:* Versions 4.0.3 patch1 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:* Versions 4.0.6 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:* Versions 4.0.7 rc1 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:* Versions 4.0.7 rc2 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:* Versions 4.0.7 rc3 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:* Versions 4.1.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:* Versions 4.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:* Versions 4.2.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:* Versions 4.2.3 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:* Versions 4.3.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:* Versions 4.3.4 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:* Versions 4.3.5 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:* Versions 4.3.6 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:* Versions 4.3.8 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:* Versions 4.3.9 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:* Versions 4.3.10 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:* Versions 4.3.11 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:* Versions 4.4.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:* Versions 4.4.1 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:* Versions 4.4.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:* Versions 4.4.3 Vulnerable ·PHP
- cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:* Versions 4.4.4 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:* Versions 5.0 rc1 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:* Versions 5.0 rc2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:* Versions 5.0 rc3 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:* Versions 5.0.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:* Versions 5.0.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:* Versions 5.0.3 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:* Versions 5.0.4 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:* Versions 5.0.5 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:* Versions 5.1.0 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:* Versions 5.1.1 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:* Versions 5.1.2 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:* Versions 5.1.3 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:* Versions 5.1.4 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:* Versions 5.1.5 Vulnerable ·PHP
- cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:* Versions 5.1.6 Vulnerable ·PHP
- cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Trustix
- cpe:2.3:o:trustix:secure_linux:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Trustix
Remediation
Red Hat 5 advisories
- RHSA-2007:0082 Released 2007-03-14 · Red Hat rating Importantphp security update
- Red Hat Enterprise Linux (v. 5 server) php-5.1.6-7.el5, php-5.1.6-7.el5.i386, php-5.1.6-7.el5.ia64 +47
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) php-5.1.6-7.el5, php-5.1.6-7.el5.i386, php-bcmath-5.1.6-7.el5 +35
- RHSA-2007:0089 Released 2007-02-26 · Red Hat rating Importantphp security update for Stronghold
- Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1) stronghold-php-4.1.2-12, stronghold-php-4.1.2-12.i386, stronghold-php-devel-4.1.2-12.i386 +7
- RHSA-2007:0088 Released 2007-02-22 · Red Hat rating Importantphp security update
- Red Hat Application Stack v1 for Enterprise Linux AS (v.4) php-5.1.6-3.el4s1.5, php-5.1.6-3.el4s1.5.i386, php-bcmath-5.1.6-3.el4s1.5 +35
- Red Hat Application Stack v1 for Enterprise Linux ES (v.4) php-5.1.6-3.el4s1.5, php-5.1.6-3.el4s1.5.i386, php-bcmath-5.1.6-3.el4s1.5 +35
Show 2 more Red Hat advisories
- RHSA-2007:0081 Released 2007-02-21 · Red Hat rating Importantphp security update
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 php-4.1.2-2.14, php-4.1.2-2.14.i386, php-4.1.2-2.14.ia64 +14
- Red Hat Enterprise Linux ES version 2.1 php-4.1.2-2.14, php-4.1.2-2.14.i386, php-devel-4.1.2-2.14.i386 +6
- Red Hat Enterprise Linux WS version 2.1 php-4.1.2-2.14, php-4.1.2-2.14.i386, php-devel-4.1.2-2.14.i386 +6
- Red Hat Linux Advanced Workstation 2.1 php-4.1.2-2.14, php-4.1.2-2.14.ia64, php-devel-4.1.2-2.14.ia64 +6
- RHSA-2007:0076 Released 2007-02-19 · Red Hat rating Importantphp security update
- Red Hat Desktop version 3 php-4.3.2-39.ent, php-4.3.2-39.ent.i386, php-devel-4.3.2-39.ent +11
- Red Hat Enterprise Linux AS version 3 php-4.3.2-39.ent, php-4.3.2-39.ent.i386, php-4.3.2-39.ent.ia64 +25
- Red Hat Enterprise Linux AS version 4 php-4.3.9-3.22.3, php-4.3.9-3.22.3.i386, php-4.3.9-3.22.3.ia64 +47
- Red Hat Enterprise Linux Desktop version 4 php-4.3.9-3.22.3, php-4.3.9-3.22.3.i386, php-devel-4.3.9-3.22.3 +25
- Red Hat Enterprise Linux ES version 3 php-4.3.2-39.ent, php-4.3.2-39.ent.i386, php-4.3.2-39.ent.ia64 +18
- Red Hat Enterprise Linux ES version 4 php-4.3.9-3.22.3, php-4.3.9-3.22.3.i386, php-4.3.9-3.22.3.ia64 +39
- Red Hat Enterprise Linux WS version 3 php-4.3.2-39.ent, php-4.3.2-39.ent.i386, php-4.3.2-39.ent.ia64 +18
- Red Hat Enterprise Linux WS version 4 php-4.3.9-3.22.3, php-4.3.9-3.22.3.i386, php-4.3.9-3.22.3.ia64 +39
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Application Stack v1 for Enterprise Linux AS (v.4) | Fixed | RHSA-2007:0088 |
| Red Hat Application Stack v1 for Enterprise Linux ES (v.4) | Fixed | RHSA-2007:0088 |
| Red Hat Desktop version 3 | Fixed | RHSA-2007:0076 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2007:0082 |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | Fixed | RHSA-2007:0081 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2007:0076 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2007:0076 |
| Red Hat Enterprise Linux Desktop Workstation (v. 5 client) | Fixed | RHSA-2007:0082 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2007:0076 |
| Red Hat Enterprise Linux ES version 2.1 | Fixed | RHSA-2007:0081 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2007:0076 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2007:0076 |
| Red Hat Enterprise Linux WS version 2.1 | Fixed | RHSA-2007:0081 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2007:0076 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2007:0076 |
| Red Hat Linux Advanced Workstation 2.1 | Fixed | RHSA-2007:0081 |
| Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1) | Fixed | RHSA-2007:0089 |
Timeline
- 2026-10-02 Threatist record created from CVE-2007-0910
- 2026-10-03 Alias added: GHSA-jmgr-hgq4-h5rf
References
Advisory 14
Other 8
- 32763
- http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm
- https://issues.rpath.com/browse/RPL-1088
- http://www.php.net/releases/5_2_1.php
- oval:org.mitre.oval:def:9514
- https://issues.rpath.com/browse/RPL-1268
- http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm
- http://www.php.net/ChangeLog-5.php#5.2.1
Sources
- CVE-2007-0910 · CVE Program
- CVE-2007-0910 · NVD
- FIRST EPSS
- GHSA-jmgr-hgq4-h5rf · GitHub Advisory Database · CC BY 4.0
- CVE-2007-0910 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences