PT-2007-5683 · Php · Php

Shinnai · Published 2007-08-23 · Updated 2017-09-29 · CVE-2007-4507

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP version 5.2.3

Description The issue is related to multiple buffer overflows in the php ntuser component. This allows context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to certain functions, including ntuser getuserlist(), ntuser getuserinfo(), ntuser getusergroups(), or ntuser getdomaincontroller().

Recommendations For PHP version 5.2.3, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict the use of the ntuser getuserlist(), ntuser getuserinfo(), ntuser getusergroups(), and ntuser getdomaincontroller() functions to minimize the risk of buffer overflows.

Exploit

Fix

Related Identifiers

CVE-2007-4507

Affected Products

Php

References · 4

• 🔥 https://exploit-db.com/exploits/4304 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4507 · Security Note
• http://milw0rm.com/exploits/4304 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4507 · Note