CVE-2002-2215: PHP

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of "To" addresses, which triggers an error in the rfc822_write_address function.

Affected products

• PHP PHP: up to and including 4.2.3; version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; …

Published 2002-12-31. Last modified 2026-06-16.