PT-2007-6662 · Php · Php

Shinnai · Publicado 2007-10-23 · Atualizado 2017-09-29 · CVE-2007-5653

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions 5.x

Description The issue allows context-dependent attackers to bypass intended limitations in the Component Object Model (COM) functions. This can be demonstrated by executing objects with the kill bit set in the corresponding ActiveX control Compatibility Flags, executing programs via a function in compatUI.dll, invoking wscript.shell via wscript.exe, invoking Scripting.FileSystemObject via wshom.ocx, and adding users via a function in shgina.dll. This is related to the com load typelib function.

Recommendations For PHP version 5.x, consider disabling the com load typelib function as a temporary workaround until a patch is available. Restrict access to the COM functions to minimize the risk of exploitation. Avoid using the COM functions to execute objects or invoke external programs until the issue is resolved.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2007-5653

Produtos afetados

Php

Referências · 9

• 🔥 https://exploit-db.com/exploits/4553 · Exploit
• http://frsirt.com/english/advisories/2007/3590 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5653 · Nota
• http://secunia.com/advisories/27280 · Nota
• http://milw0rm.com/exploits/4553 · Nota
• http://vupen.com/english/advisories/2007/3590 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5653 · Nota de Segurança
• http://xforce.iss.net/xforce/xfdb/37368 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37368 · Nota