What is CVE-2008-2050?

CVE-2008-2050 is a high-severity software vulnerability (Memory corruption) with a CVSS score of 10. Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.

Is CVE-2008-2050 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 3%.

What products does CVE-2008-2050 affect?

Tracked products affected include PHP. Check the version you run to see whether it is affected.

How do I fix CVE-2008-2050?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

← All products

CVE-2008-2050

HIGH severity · CVSS 10 · Memory corruption

10CVSS HIGH

Summary

Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges required—

User interaction—

Confidentiality impact—

Integrity impact—

Availability impact—

Exploit probability (EPSS)3%

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

PHP

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://secunia.com/advisories/30048Advisory
http://secunia.com/advisories/30083Advisory
http://secunia.com/advisories/30158Advisory
http://secunia.com/advisories/30345Advisory
http://secunia.com/advisories/30967Advisory
http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/fastcgi.c?r1=1.44&r2=1.45&diff_format=uExploit