PT-2010-5328 · Php+1 · Php+1

Publicado 2010-11-09 · Atualizado 2011-05-04 · CVE-2010-4156

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Libmbfl version 1.1.0 PHP versions 5.3.x through 5.3.3

Description The issue allows context-dependent attackers to obtain potentially sensitive information via a large value of the length parameter in the mb strcut function.

Recommendations For Libmbfl version 1.1.0, consider restricting the use of the mb strcut function until a patch is available. For PHP versions 5.3.x through 5.3.3, avoid using large values for the length parameter in the mb strcut function to minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-4156

RHSA-2011:0196

RHSA-2011_0196

Produtos afetados

Php

Red Hat

Referências · 28

• 🔥 http://openwall.com/lists/oss-security/2010/11/08/13 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2010/11/07/2 · Exploit
• 🔥 http://securityfocus.com/bid/44727 · Exploit
• 🔥 https://exploit-db.com/exploits/34979 · Exploit
• http://vupen.com/english/advisories/2011/0021 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4156 · Nota de Segurança
• http://secunia.com/advisories/43189 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2010:225 · Aviso do Fabricante
• http://pastie.org/1279428 · Correção
• http://vupen.com/english/advisories/2011/0077 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4645 · Nota
• http://bugs.php.net/bug.php?id=52929 · Nota
• http://ubuntu.com/usn/USN-1042-1 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2011:0196 · Nota
• http://vupen.com/english/advisories/2011/0020 · Nota