PT-2007-2912 · Php · Php

Published 2007-03-20 · Updated 2011-03-08 · CVE-2007-1522

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.2.0 through 5.2.1

Description A double free issue in the session extension allows context-dependent attackers to execute arbitrary code via illegal characters in a session identifier. This occurs when the internal session storage module rejects the identifier and calls the session identifier generator with an improper environment, leading to code execution when the generator is interrupted. This can be triggered by causing a memory limit violation or certain PHP errors.

Recommendations For PHP versions 5.2.0 through 5.2.1, update to a version that contains a fix for this issue to prevent arbitrary code execution.

Exploit

Fix

Related Identifiers

CVE-2007-1522

DSA-1283-1

Affected Products

Php

References · 10

• 🔥 http://php-security.org/MOPB/MOPB-23-2007.html · Exploit
• 🔥 https://exploit-db.com/exploits/3480 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1522 · Security Note
• http://novell.com/linux/security/advisories/2007_32_php.html · Vendor Advisory
• http://secunia.com/advisories/25056 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1522 · Note
• http://securityfocus.com/bid/22971 · Note
• http://secunia.com/advisories/24505 · Note
• http://frsirt.com/english/advisories/2007/0960 · Note
• http://vupen.com/english/advisories/2007/0960 · Note