CVE-2002-0986

N/A Unknown

Published: September 24, 2002 Modified: April 16, 2026

Description

The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103011916928204&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105760591228031&w=2

Source: cve@mitre.org

http://www.debian.org/security/2002/dsa-168

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/410609

Source: cve@mitre.org

US Government Resource

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2002_036_modphp4.html

Source: cve@mitre.org

http://www.osvdb.org/2160

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-213.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-214.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-243.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-244.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-248.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-159.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/5562

Source: cve@mitre.org

Patch Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/9959

Source: cve@mitre.org

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt