CVE-2008-3660
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote...
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.
Exploit likelihood
What each source reports
NVD Score used
5.0
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.
- Record
CVE-2008-3660- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.
- Record
CVE-2008-3660- Updated
- 2026-11-02
EUVDEUVD-2008-3646 No score
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.
- Record
EUVD-2008-3646- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2gfx-p78c-mv7h No score
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote...
PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.
- Record
GHSA-2gfx-p78c-mv7h- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:4.0 From an advisory covering 3 CVEs |
before 5.2.0-8+etch13, plus listed versions 5.2.0-8+etch15.2.0-8+etch105.2.0-8+etch115.2.0-8+etch11~p15.2.0-8+etch3 Show 7 moreShow less5.2.0-8+etch45.2.0-8+etch5~pu15.2.0-8+etch65.2.0-8+etch75.2.0-8+etch85.2.0-8+etch95.2.0-8+etch9~bpo31+1 |
5.2.0-8+etch13 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
Show 143 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:4.3.2-51.ent | 0:4.3.2-51.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:4.3.9-3.22.15 | 0:4.3.9-3.22.15 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-23.2.el5_3 | 0:5.1.6-23.2.el5_3 |
phpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-cliRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-commonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-gdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-imapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-soapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.6-4.el5s2 | 0:5.2.6-4.el5s2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3660 is a medium vulnerability (CVSS 5.0) in Php, published August 15, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.35%, the 88th percentile. No source names a fixed version.
References
secunia.com/advisories/32746
marc.info?l=bugtraq&m=125631037611762&w=2
support.apple.com/kb/HT3549
security.gentoo.org/glsa/glsa-200811-05.xml
marc.info?l=bugtraq&m=124654546101607&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/44402
Show 66 moreShow less
secunia.com/advisories/31982
redhat.com/archives/fedora-package-announce/2009-May/msg01451.html
securityfocus.com/archive/1/501376/100/0/threaded
mandriva.com/security/advisories?name=MDVSA-2009:024
wiki.rpath.com/Advisories:rPSA-2009-0035
secunia.com/advisories/35074
secunia.com/advisories/32148
lists.apple.com/archives/security-announce/2009/May/msg00002.html
openwall.com/lists/oss-security/2008/08/08/2
lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
mandriva.com/security/advisories?name=MDVSA-2009:023
mandriva.com/security/advisories?name=MDVSA-2009:022
redhat.com/support/errata/RHSA-2009-0350.html
redhat.com/archives/fedora-package-announce/2009-May/msg01465.html
us-cert.gov/cas/techalerts/TA09-133A.html
openwall.com/lists/oss-security/2008/08/13/8
vupen.com/english/advisories/2009/1297
bugs.gentoo.org/show_bug.cgi?id=234102
mandriva.com/security/advisories?name=MDVSA-2009:021
debian.org/security/2008/dsa-1647
vupen.com/english/advisories/2008/2336
securitytracker.com/id?1020994
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9597
secunia.com/advisories/35306
secunia.com/advisories/35650
nvd.nist.gov/vuln/detail/CVE-2008-3660
github.com/advisories/GHSA-2gfx-p78c-mv7h
access.redhat.com/errata/RHSA-2009:0337
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=459529
bugzilla.redhat.com/show_bug.cgi?id=459572
bugzilla.redhat.com/show_bug.cgi?id=478425
bugzilla.redhat.com/show_bug.cgi?id=478848
bugzilla.redhat.com/show_bug.cgi?id=479272
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0337.json
access.redhat.com/security/cve/CVE-2008-3658
cve.org/CVERecord?id=CVE-2008-3658
nvd.nist.gov/vuln/detail/CVE-2008-3658
access.redhat.com/security/cve/CVE-2008-3660
cve.org/CVERecord?id=CVE-2008-3660
access.redhat.com/security/cve/CVE-2008-5498
cve.org/CVERecord?id=CVE-2008-5498
nvd.nist.gov/vuln/detail/CVE-2008-5498
access.redhat.com/security/cve/CVE-2008-5557
cve.org/CVERecord?id=CVE-2008-5557
nvd.nist.gov/vuln/detail/CVE-2008-5557
access.redhat.com/security/cve/CVE-2009-0754
cve.org/CVERecord?id=CVE-2009-0754
nvd.nist.gov/vuln/detail/CVE-2009-0754
access.redhat.com/errata/RHSA-2009:0338
bugzilla.redhat.com/show_bug.cgi?id=480167
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0338.json
access.redhat.com/security/cve/CVE-2008-5814
cve.org/CVERecord?id=CVE-2008-5814
nvd.nist.gov/vuln/detail/CVE-2008-5814
access.redhat.com/errata/RHSA-2009:0350
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=474824
bugzilla.redhat.com/show_bug.cgi?id=494530
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0350.json
access.redhat.com/security/cve/CVE-2008-5658
cve.org/CVERecord?id=CVE-2008-5658
nvd.nist.gov/vuln/detail/CVE-2008-5658
access.redhat.com/security/cve/CVE-2009-1271
cve.org/CVERecord?id=CVE-2009-1271
nvd.nist.gov/vuln/detail/CVE-2009-1271