PT-2007-2775 · Php+1 · Php+1
Stefan Esser
·
Published
2007-02-19
·
Updated
2018-10-30
·
CVE-2007-1380
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
PHP versions prior to 4.4.5
PHP versions 5.x prior to 5.2.1
Description
The issue allows context-dependent attackers to obtain sensitive information, such as memory contents, via a serialized variable entry with a large length value. This triggers a buffer over-read in the php binary serialization handler in the session extension.
Recommendations
For PHP versions prior to 4.4.5, update to version 4.4.5 or later.
For PHP versions 5.x prior to 5.2.1, update to version 5.2.1 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Php
Red Hat