[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-0909Date: (C)2007-02-13   (M)2023-12-22


Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECTRACK-1017671
2007-0009
20070201-01-P
http://www.securityfocus.com/archive/1/461462/100/0/threaded
BID-22496
SECUNIA-24089
SECUNIA-24195
SECUNIA-24217
SECUNIA-24236
SECUNIA-24248
SECUNIA-24284
SECUNIA-24295
SECUNIA-24322
SECUNIA-24419
SECUNIA-24421
SECUNIA-24432
SECUNIA-24514
SECUNIA-24606
SECUNIA-24642
OSVDB-32764
OSVDB-32765
ADV-2007-0546
DSA-1264
GLSA-200703-21
MDKSA-2007:048
OpenPKG-SA-2007.010
RHSA-2007:0076
RHSA-2007:0081
RHSA-2007:0082
RHSA-2007:0088
RHSA-2007:0089
SUSE-SA:2007:020
USN-424-1
USN-424-2
http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm
http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm
http://www.php.net/ChangeLog-5.php#5.2.1
http://www.php.net/releases/5_2_1.php
https://issues.rpath.com/browse/RPL-1088
oval:org.mitre.oval:def:9722

CPE    67
cpe:/a:php:php:3.0
cpe:/a:php:php:5.1.4
cpe:/a:php:php:5.1.5
cpe:/a:php:php:5.1.6
...

© SecPod Technologies