PT-2007-5820 · Php · Php

Publicado

2007-09-04

·

Atualizado

2018-10-03

·

CVE-2007-4662

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.2.4
Description: A buffer overflow exists in the php openssl make REQ function, which could be exploited by a remote attacker to overflow a buffer and execute arbitrary code on the system or cause the application to crash.
Recommendations: For versions prior to 5.2.4, update to version 5.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the php openssl make REQ function until a patch is applied.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-4662
DSA-1444-1
DTSA-61-1

Produtos afetados

Php