PT-2007-2847 · Php Development Team · Php

Publicado 2007-03-14 · Atualizado 2008-09-05 · CVE-2007-1453

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP version 5.2.0

Description A buffer underflow issue exists in the filtering extension of PHP, specifically in the PHP FILTER TRIM DEFAULT macro. This allows attackers to execute arbitrary code by calling the filter var function with certain modes, such as FILTER VALIDATE INT. The issue arises when filter writes a null byte in whitespace preceding the buffer.

Recommendations For PHP version 5.2.0, consider disabling the filter var function with modes like FILTER VALIDATE INT until a patch is available to prevent potential code execution. Restrict access to the filtering extension to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-1453

DSA-1283-1

DTSA-39-1

Produtos afetados

Php

Referências · 10

• 🔥 http://securityfocus.com/bid/22922 · Exploit
• 🔥 https://exploit-db.com/exploits/29732 · Exploit
• http://novell.com/linux/security/advisories/2007_32_php.html · Aviso do Fabricante
• http://php.net/releases/5_2_1.php · Nota
• http://debian.org/security/2007/dsa-1283 · Aviso do Fabricante
• http://php-security.org/MOPB/MOPB-19-2007.html · Nota
• http://secunia.com/advisories/25056 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1453 · Nota de Segurança
• http://secunia.com/advisories/25062 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1453 · Nota