PT-2006-5575 · Php+1 · Php+1

Stefan Esser · Publicado 2006-10-09 · Atualizado 2018-10-30 · CVE-2006-4812

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions 4 before 4.3.0 PHP versions 5 up to 5.1.6

Description The issue is related to an integer overflow that allows remote attackers to execute arbitrary code. This is achieved by providing a large value for the number of array elements to the unserialize PHP function, which triggers the overflow in the Zend Engine ecalloc function.

Recommendations For PHP versions 4 before 4.3.0, update to version 4.3.0 or later to resolve the issue. For PHP versions 5 up to 5.1.6, update to a version later than 5.1.6 to resolve the issue.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2006-4812

RHSA-2006:0688

RHSA-2006:0708

Produtos afetados

Php

Zend Engine

Referências · 31

• 🔥 https://exploit-db.com/exploits/28760 · Exploit
• http://securitytracker.com/id?1016984 · Correção
• http://secunia.com/advisories/22533 · Nota
• http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162 · Nota
• http://secunia.com/advisories/22650 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm · Nota
• http://secunia.com/advisories/22300 · Nota
• http://secunia.com/advisories/22338 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29362 · Nota
• http://securitylab.ru/vulnerability/274954.php · Nota
• http://gentoo.org/security/en/glsa/glsa-200610-14.xml · Aviso do Fabricante
• http://nvd.nist.gov/cvss.cfm?vector=(AV:R/AC:H/Au:NR/C:P/I:P/A:P/B:N) · Nota
• http://vupen.com/english/advisories/2006/3922 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2006-234.htm · Nota
• http://securityfocus.com/archive/1/448014/100/0/threaded · Nota