PT-2007-2912 · Php · Php

Publicado 2007-03-20 · Atualizado 2011-03-08 · CVE-2007-1522

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.2.0 through 5.2.1

Description A double free issue in the session extension allows context-dependent attackers to execute arbitrary code via illegal characters in a session identifier. This occurs when the internal session storage module rejects the identifier and calls the session identifier generator with an improper environment, leading to code execution when the generator is interrupted. This can be triggered by causing a memory limit violation or certain PHP errors.

Recommendations For PHP versions 5.2.0 through 5.2.1, update to a version that contains a fix for this issue to prevent arbitrary code execution.

Exploit

Correção

Identificadores relacionados

CVE-2007-1522

DSA-1283-1

Produtos afetados

Php

Referências · 10

• 🔥 http://php-security.org/MOPB/MOPB-23-2007.html · Exploit
• 🔥 https://exploit-db.com/exploits/3480 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1522 · Nota de Segurança
• http://secunia.com/advisories/25056 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1522 · Nota
• http://securityfocus.com/bid/22971 · Nota
• http://secunia.com/advisories/24505 · Nota
• http://frsirt.com/english/advisories/2007/0960 · Nota
• http://vupen.com/english/advisories/2007/0960 · Nota
• http://novell.com/linux/security/advisories/2007_32_php.html · Aviso do Fabricante