[Forgot Password]
Login  Register Subscribe

23631

 
 

122183

 
 

98060

 
 

909

 
 

79198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-2872

Date: (C)2007-06-04   (M)2017-10-12 


Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.

CVSS Score: 6.8Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL





Reference:
SECTRACK-1018186
2007-0023
http://www.securityfocus.com/archive/1/archive/1/470244/100/0/threaded
BID-24261
SECUNIA-25456
SECUNIA-25535
SECUNIA-26048
SECUNIA-26231
SECUNIA-26838
SECUNIA-26871
SECUNIA-26895
SECUNIA-26930
SECUNIA-26967
SECUNIA-27037
SECUNIA-27102
SECUNIA-27110
SECUNIA-27351
SECUNIA-27377
SECUNIA-27545
SECUNIA-27864
SECUNIA-28318
SECUNIA-28658
SECUNIA-28750
SECUNIA-28936
SECUNIA-30040
OSVDB-36083
ADV-2007-2061
ADV-2007-3386
ADV-2008-0059
ADV-2008-0398
FEDORA-2007-2215
FEDORA-2007-709
GLSA-200710-02
HPSBUX02308
HPSBUX02332
MDKSA-2007:187
OpenPKG-SA-2007.020
RHSA-2007:0888
RHSA-2007:0889
RHSA-2007:0890
RHSA-2007:0891
SSA:2007-152-01
SSA:2008-045-03
SSRT071447
SSRT080010
SUSE-SA:2007:044
SUSE-SA:2008:004
USN-549-1
USN-549-2
http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm
http://www.php.net/ChangeLog-4.php
http://www.php.net/releases/4_4_8.php
http://www.php.net/releases/5_2_3.php
http://www.sec-consult.com/291.html
https://issues.rpath.com/browse/RPL-1693
https://issues.rpath.com/browse/RPL-1702
https://launchpad.net/bugs/173043
php-chunksplit-security-bypass(39398)

CPE    18
cpe:/a:php:php:5.1
cpe:/a:php:php:5.0.0
cpe:/a:php:php:4.4.7
cpe:/a:php:php:5.0.5
...
CWE    1
CWE-189

© 2013 SecPod Technologies