HTTP: PHP memory_limit Arbitrary Code Execution

This signature detects attempts to exploit a known vulnerability against PHP. A successful attack can lead to arbitrary code execution.

Extended Description

PHP modules compiled with memory_limit support are affected by a remote code-execution vulnerability. This issue occurs because the PHP module fails to properly handle memory_limit request termination. An attacker can leverage this issue by exploiting the Apache ap_escape_html Memory Allocation Denial Of Service Vulnerability (BID 10619). The attacker can cause premature termination during critical code execution. Note that although the Apache vulnerability is the only known attack vector, there may be other attack vectors that are currently unknown. Attackers can exploit this issue to execute arbitrary code on an affected computer within the context of the vulnerable application, facilitating unauthorized access.

Affected Products

Avaya s8700,Apple mac_os_x

References

BugTraq: 10725

CVE: CVE-2004-0594

Short Name

HTTP:PHP:MEMORY-LIMIT-CE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: PHP memory_limit Arbitrary Code Execution

Extended Description

Affected Products

References

Found a potential security threat?