CVE-2008-2050

Published: 05 May 2008

Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.

Priority

Status

Package	Release	Status
php5 Launchpad, Ubuntu, Debian	Upstream	Released (5.2.6)







	Patches: Debdiff: http://launchpadlibrarian.net/15065228/php5_5.2.4-2ubuntu5.2.debdiff Vendor: http://www.debian.org/security/2008/dsa-1572

Notes

Author	Note
jdstrand	from redhat bug: Since the FastCGI server is local trusted code and not under the control of an attacker Dapper not affected (code does not exist)

References

Bugs

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Further reading