PT-2007-2911 · Php · Php

Publicado 2007-03-20 · Atualizado 2011-03-08 · CVE-2007-1521

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 4.4.7 PHP versions 5.x prior to 5.2.2

Description A double free issue allows context-dependent attackers to execute arbitrary code by interrupting the session regenerate id function. This can be achieved by calling a userspace error handler or triggering a memory limit violation.

Recommendations For PHP versions prior to 4.4.7, update to version 4.4.7 or later. For PHP versions 5.x prior to 5.2.2, update to version 5.2.2 or later.

Exploit

Correção

Identificadores relacionados

CVE-2007-1521

DSA-1282-1

DSA-1283-1

DTSA-39-1

DTSA-40-1

Produtos afetados

Php

Referências · 25

• 🔥 https://exploit-db.com/exploits/3479 · Exploit
• 🔥 http://php-security.org/MOPB/MOPB-22-2007.html · Exploit
• http://debian.org/security/2007/dsa-1283 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2732 · Nota
• http://securityfocus.com/bid/25159 · Nota
• http://secunia.com/advisories/26235 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1521 · Nota de Segurança
• http://secunia.com/advisories/25062 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1521 · Nota
• http://secunia.com/advisories/24505 · Aviso do Fabricante
• http://docs.info.apple.com/article.html?artnum=306172 · Nota
• http://security.gentoo.org/glsa/glsa-200705-19.xml · Aviso do Fabricante
• http://frsirt.com/english/advisories/2007/0960 · Nota
• http://vupen.com/english/advisories/2007/0960 · Nota
• http://ubuntu.com/usn/usn-455-1 · Aviso do Fabricante