PT-2007-2869 · Php Development Team+1 · Php+1

Rgod · Published 2007-03-16 · Updated 2018-10-19 · CVE-2007-1475

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 4.4.7

Description The issue is related to multiple buffer overflows in the ibase connect and ibase pconnect functions within the interbase extension. This allows context-dependent attackers to execute arbitrary code via a long argument.

Recommendations For versions prior to 4.4.7, update to a version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2007-1475

Affected Products

Interbase

Php

References · 12

• 🔥 https://exploit-db.com/exploits/3488 · Exploit
• 🔥 http://securityreason.com/securityalert/2439 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1475 · Security Note
• http://milw0rm.com/exploits/3488 · Note
• http://securityfocus.com/archive/1/462931/100/0/threaded · Note
• http://secunia.com/advisories/24529 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1475 · Note
• http://xforce.iss.net/xforce/xfdb/33019 · Note
• http://securityfocus.com/archive/1/archive/1/462931/100/0/threaded · Note
• http://securityfocus.com/bid/22976 · Note
• http://retrogod.altervista.org/php_446_ibase_connect_bof.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33019 · Note