CVE-2003-0172

Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

19.00% chance of exploitation in the next 30 days, 97th percentile

Published

2003-03-29

Updated

2024-08-08

Proof-of-concept exploits (2)

• http://www.securityfocus.com/archive/1/385238
• cyberdesu/Remote-Buffer-overflow-CVE-2003-01720★ · 2023-03-28

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/729

References

• CVE Record
• NVD entry

Related

• CVE-2012-4869
• CVE-2003-0171
• CVE-2003-0190
• CVE-2003-0169
• CVE-2003-0195
• CVE-2003-0166