CVE-2002-0081: Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split...

Security readout for executives and security teams

This is an old PHP remote code execution issue in file upload handling. A vulnerable server can be attacked through a multipart web request if PHP file uploads are enabled. The business risk is highest for legacy internet-facing PHP 3 or PHP 4 systems still running old packages. Exposure is likely limited to obsolete PHP 3.x or PHP 4.x deployments, especially mod_php-backed web applications that still accept file uploads. Modern supported PHP versions are not identified as affected in the provided bundle. Treat as urgent only if legacy PHP 3 or PHP 4 remains in production. For modern environments, prioritize confirmation through asset inventory rather than emergency response. Mitigation focus: Identify and retire unsupported PHP 3.x and PHP 4.x systems.; Apply vendor-supplied PHP or mod_php security updates for affected distributions.; Disable PHP file_uploads where legacy systems cannot be patched immediately..

Prepared

Jul 1, 2026, 06:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.