CVE-2003-0172

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 19.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-04-02 · updated 2026-06-16

Description

Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.

Affected products

PHP: 4.3.1

References

http://marc.info/?l=bugtraq&m=104878149020152&w=2
http://marc.info/?l=bugtraq&m=104931415307111&w=2
http://www.osvdb.org/2113
http://www.securityfocus.com/archive/1/316583
http://www.securityfocus.com/archive/1/385238
http://www.securityfocus.com/bid/7210
https://exchange.xforce.ibmcloud.com/vulnerabilities/11637
http://marc.info/?l=bugtraq&m=104878149020152&w=2
http://marc.info/?l=bugtraq&m=104931415307111&w=2
http://www.osvdb.org/2113
http://www.securityfocus.com/archive/1/316583
http://www.securityfocus.com/archive/1/385238

Get alerted when CVE-2003-0172 or the next vulnerability affects your stack