PHP is prone to a denial-of-service vulnerability because the application fails to handle certain file requests. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. PHP 4.4 prior to 4.4.9 and PHP 5.2 through 5.2.6 are vulnerable.

Updates are available. Please see the references for more information.

• http://support.avaya.com/elmodocs2/security/ASA-2009-161.htm
• http://www.openwall.com/lists/oss-security/2008/08/08/2
• http://www.php.net
• http://www.php.net/ChangeLog-5.php#5.2.8
• http://www.securityfocus.com/bid/31612

---

Updated on 2015-03-25