PT-2007-3211 · Php+1 · Libxmlrpc+2

Stanislav Malyshev · Published 2007-05-08 · Updated 2019-05-22 · CVE-2007-1864

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 4.4.7 PHP versions 5.x prior to 5.2.2

Description: A buffer overflow issue exists in the bundled libxmlrpc library. The impact and attack vectors of this issue are remote.

Recommendations: For PHP versions prior to 4.4.7, update to version 4.4.7 or later. For PHP versions 5.x prior to 5.2.2, update to version 5.2.2 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-1864

DSA-1330-1

DSA-1331-1

RHSA-2007:0348

RHSA-2007:0349

RHSA-2007:0355

RHSA-2007_0348

RHSA-2007_0349

Affected Products

Php

Red Hat

Libxmlrpc

References · 37

• http://us2.php.net/releases/5_2_2.php · Vendor Advisory
• http://us2.php.net/releases/4_4_7.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1864 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0349.html · Vendor Advisory
• http://ubuntu.com/usn/usn-485-1 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2007-0348.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0355.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html · Vendor Advisory
• http://debian.org/security/2007/dsa-1330 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200705-19.xml · Vendor Advisory
• http://trustix.org/errata/2007/0017 · Vendor Advisory
• http://debian.org/security/2007/dsa-1331 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:102 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:103 · Vendor Advisory
• http://secunia.com/advisories/27377 · Note