CVE-2004-0958: php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET,...

Security readout for executives and security teams

This is an old PHP memory disclosure flaw. Web servers running PHP before 5.0.2 could expose sensitive process memory when handling malformed user-supplied request variables. The source bundle does not provide CVSS, confirmed active exploitation, or detailed impact scope. Exposure is most likely in legacy web applications or servers still running PHP before 5.0.2, including old distribution packages. Modern supported PHP installations should not be affected by this specific version range. Treat this as a legacy-risk cleanup item unless old PHP is found in production. If PHP before 5.0.2 is exposed, prioritize remediation because the flaw can disclose sensitive memory remotely. Mitigation focus: Upgrade PHP to 5.0.2 or later where this version line still exists.; Apply relevant vendor security updates from distribution advisories such as Red Hat or Fedora.; Retire or isolate systems that depend on PHP versions before 5.0.2..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.