#VU110534 Input validation error in PHP - CVE-2002-1783

Vulnerability identifier: #VU110534

Vulnerability risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2002-1783

CWE-ID: CWE-20

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
PHP
Universal components / Libraries / Scripting languages

Vendor: PHP Group

Description

The vulnerability allows a remote non-authenticated attacker to corrupt data.

CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.

Mitigation
Install update from vendor's website.

Vulnerable software versions

PHP: 3.0.14, 3.0.15, 3.0.16, 3.0.17, 3.0.18, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.1, 4.1.1, 4.1.2, 4.2, 4.2.1, 4.2.2, 4.2.3

---

External links
https://archives.neohapsis.com/archives/bugtraq/2002-09/0086.html
https://archives.neohapsis.com/archives/bugtraq/2002-09/0132.html
https://www.debian.org/security/2002/dsa-168
https://www.securityfocus.com/bid/5681
https://exchange.xforce.ibmcloud.com/vulnerabilities/10080

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.