PT-2009-5607 · Php+1 · Php+1

Published 2009-09-22 · Updated 2022-09-01 · CVE-2009-3294

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.11 PHP versions 5.3.x prior to 5.3.1

Description The issue allows context-dependent attackers to cause a denial of service (crash) via a crafted (1) "e" or (2) "er" string in the second argument (aka mode) of the popen API function, possibly related to the fdopen function in the Microsoft C runtime library. This might not cross privilege boundaries except in rare cases in which the mode argument is accessible to an attacker outside of an application that uses the popen function.

Recommendations For PHP versions prior to 5.2.11, update to version 5.2.11 or later. For PHP versions 5.3.x prior to 5.3.1, update to version 5.3.1 or later.

Exploit

Fix

DoS

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2009-3294

Affected Products

C Runtime Library

Php

References · 14

• 🔥 http://bugs.php.net/bug.php?id=44683 · Exploit
• http://php.net/releases/5_2_11.php · Vendor Advisory
• http://news.php.net/php.announce/79 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3294 · Security Note
• http://php.net/ChangeLog-5.php#5.2.11 · Vendor Advisory
• http://php.net/ChangeLog-5.php · Vendor Advisory
• http://openwall.com/lists/oss-security/2009/09/20/1 · Patch
• http://php.net/releases/5_3_1.php · Vendor Advisory
• http://svn.php.net/viewvc?view=revision&revision=287779 · Vendor Advisory
• http://osvdb.org/58188 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3294 · Note
• http://openwall.com/lists/oss-security/2009/11/20/3 · Note
• http://openwall.com/lists/oss-security/2009/11/20/2 · Note
• https://t.me/cvenotify/35595 · Telegram Post