PT-2010-5328 · Php+1 · Php+1

Published 2010-11-09 · Updated 2011-05-04 · CVE-2010-4156

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Libmbfl version 1.1.0 PHP versions 5.3.x through 5.3.3

Description The issue allows context-dependent attackers to obtain potentially sensitive information via a large value of the length parameter in the mb strcut function.

Recommendations For Libmbfl version 1.1.0, consider restricting the use of the mb strcut function until a patch is available. For PHP versions 5.3.x through 5.3.3, avoid using large values for the length parameter in the mb strcut function to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-4156

RHSA-2011:0196

RHSA-2011_0196

Affected Products

Php

Red Hat

References · 28

• 🔥 http://openwall.com/lists/oss-security/2010/11/08/13 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2010/11/07/2 · Exploit
• 🔥 http://securityfocus.com/bid/44727 · Exploit
• 🔥 https://exploit-db.com/exploits/34979 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4156 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2010:225 · Vendor Advisory
• http://pastie.org/1279428 · Patch
• http://ubuntu.com/usn/USN-1042-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0196.html · Vendor Advisory
• http://pastie.org/1279682 · Patch
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=130331363227777&w=2 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0021 · Note
• http://secunia.com/advisories/43189 · Note