PT-2007-3067 · Php · Php

Publicado 2007-03-26 · Atualizado 2018-10-30 · CVE-2007-1700

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 4.4.5 PHP versions prior to 5.2.1

Description: The issue allows context-dependent attackers to execute arbitrary code via a crafted string in the session register after unsetting HTTP SESSION VARS and SESSION, which destroys the session data Hashtable. This occurs because the session extension in PHP calculates the reference count for the session variables without considering the internal pointer from the session globals.

Recommendations: For PHP versions prior to 4.4.5, update to version 4.4.5 or later. For PHP versions prior to 5.2.1, update to version 5.2.1 or later.

Exploit

Correção

Identificadores relacionados

CVE-2007-1700

DSA-1283-1

DTSA-39-1

Produtos afetados

Php

Referências · 20

• 🔥 https://exploit-db.com/exploits/3571 · Exploit
• 🔥 http://securityfocus.com/bid/23119 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33520 · Nota
• http://ubuntu.com/usn/usn-455-1 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1700 · Nota
• http://secunia.com/advisories/25423 · Nota
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200705-19.xml · Aviso do Fabricante
• http://secunia.com/advisories/25850 · Nota
• http://debian.org/security/2007/dsa-1283 · Aviso do Fabricante
• http://php-security.org/MOPB/MOPB-30-2007.html · Nota
• http://secunia.com/advisories/25445 · Nota
• http://novell.com/linux/security/advisories/2007_32_php.html · Aviso do Fabricante
• http://secunia.com/advisories/25056 · Nota
• http://vupen.com/english/advisories/2007/2374 · Nota