PT-2007-2770 · Php · Php

Stefan Esser · Published 2007-03-09 · Updated 2017-10-11 · CVE-2007-1375

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 5.2.1 and earlier

Description The issue is related to an integer overflow in the substr compare() function, which allows attackers to read sensitive memory by providing a large value in the length argument. This integer overflow occurs during sanity checks on input parameters, enabling the comparison of offsets outside the allocated buffer and leading to memory access outside the buffer. As a result, sensitive information can be retrieved, causing a loss of confidentiality.

Recommendations For PHP versions 5.2.1 and earlier, consider updating to a newer version to mitigate the risk, as the substr compare() function's integer overflow can be exploited to access sensitive memory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-1375

DSA-1283-1

DTSA-39-1

Affected Products

Php

References · 18

• 🔥 http://php-security.org/MOPB/MOPB-14-2007.html · Exploit
• 🔥 https://exploit-db.com/exploits/3424 · Exploit
• http://debian.org/security/2007/dsa-1283 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200703-21.xml · Vendor Advisory
• http://ubuntu.com/usn/usn-455-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1375 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:187 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_32_php.html · Vendor Advisory
• http://securityfocus.com/bid/22851 · Note
• http://secunia.com/advisories/25062 · Note
• http://secunia.com/advisories/26895 · Note
• http://milw0rm.com/exploits/3424 · Note
• http://us2.php.net/releases/5_2_2.php · Note
• http://secunia.com/advisories/25057 · Note
• http://secunia.com/advisories/25056 · Note