PT-2007-3245 · Php+1 · Php+1

Published 2007-04-10 · Updated 2017-10-11 · CVE-2007-1900

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: PHP versions 5.2.0 through 5.2.1

Description: A CRLF injection issue exists due to an incorrect regular expression used in the FILTER VALIDATE EMAIL filter. This allows attackers to inject arbitrary e-mail headers via an e-mail address containing a ' ' character, potentially enabling them to send unsolicited e-mail from the host.

Recommendations: For PHP versions 5.2.0 and 5.2.1, consider disabling the FILTER VALIDATE EMAIL function until a patch is available to prevent exploitation. Restrict the use of the ext/filter extension to minimize the risk of malicious mail header injection. Avoid using e-mail addresses with newline characters in the affected filter to prevent bypassing the regular expression.

Exploit

Fix

Related Identifiers

CVE-2007-1900

DSA-1283-1

DTSA-39-1

HPSBUX02262

Affected Products

Hp-Ux

Php

References · 52

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_modjk_overflow.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386 · Security Note
• http://php-security.org/MOPB/PMOPB-45-2007.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2872 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1887 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0774 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385 · Security Note
• https://redhat.com/archives/fedora-package-announce/2007-September/msg00397.html · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.482863 · Vendor Advisory
• http://debian.org/security/2007/dsa-1283 · Vendor Advisory
• http://trustix.org/errata/2007/0023 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_32_php.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1900 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1863 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1358 · Security Note