CVE-2007-1717

Published Mar 28, 2007 CVSS 2.0 · 5.0 Medium EPSS 4.8% KEV · Not listed
Description
The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0') byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases when the trailing contents of e-mail messages are important, such as logging information or if the message is expected to be well-formed.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 1:06 PM
Reserved
Mar 27, 2007, 12:00 AM
Status
Modified
Published
Mar 28, 2007, 12:19 AM
Modified
Jun 16, 2026, 10:38 PM