PT-2007-5683 · Php · Php

Shinnai · Publicado 2007-08-23 · Atualizado 2017-09-29 · CVE-2007-4507

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP version 5.2.3

Description The issue is related to multiple buffer overflows in the php ntuser component. This allows context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to certain functions, including ntuser getuserlist(), ntuser getuserinfo(), ntuser getusergroups(), or ntuser getdomaincontroller().

Recommendations For PHP version 5.2.3, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict the use of the ntuser getuserlist(), ntuser getuserinfo(), ntuser getusergroups(), and ntuser getdomaincontroller() functions to minimize the risk of buffer overflows.

Exploit

Correção

Identificadores relacionados

CVE-2007-4507

Produtos afetados

Php

Referências · 4

• 🔥 https://exploit-db.com/exploits/4304 · Exploit
• http://milw0rm.com/exploits/4304 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4507 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4507 · Nota de Segurança