PT-2007-2807 · Php · Php

Rgod · Publicado 2007-03-12 · Atualizado 2017-10-11 · CVE-2007-1413

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.3 PHP version 4.4.6

Description The issue is related to a buffer overflow in the snmpget function within the snmp extension. This allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).

Recommendations For PHP versions prior to 5.2.3, update to version 5.2.3 or later to resolve the issue. For PHP version 4.4.6, consider upgrading to a newer version of PHP to mitigate the risk, as PHP 4 is no longer supported. As a temporary workaround, consider restricting the use of the snmpget function until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-1413

Produtos afetados

Php

Referências · 10

• 🔥 https://exploit-db.com/exploits/4204 · Exploit
• 🔥 http://securityfocus.com/bid/22893 · Exploit
• 🔥 https://exploit-db.com/exploits/3439 · Exploit
• 🔥 https://exploit-db.com/exploits/4274 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1413 · Nota
• http://milw0rm.com/exploits/3439 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35517 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1413 · Nota de Segurança
• http://retrogod.altervista.org/php_446_snmpget_local_bof.html · Nota
• http://secunia.com/advisories/24440 · Nota