{"api_version":"1","generated_at":"2026-07-23T12:26:54+00:00","cve":"CVE-2007-3806","urls":{"html":"https://cve.report/CVE-2007-3806","api":"https://cve.report/api/cve/CVE-2007-3806.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-3806","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-3806"},"summary":{"title":"CVE-2007-3806","description":"The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-07-17 00:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-20","CWE-399","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.debian.org/security/2008/dsa-1578","name":"http://www.debian.org/security/2008/dsa-1578","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1578-1 php4","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30288","name":"http://secunia.com/advisories/30288","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Debian update for php4 - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/4181","name":"http://www.exploit-db.com/exploits/4181","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PHP 5.2.3 glob() Denial of Service Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26085","name":"http://secunia.com/advisories/26085","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"PHP \"glob()\" Code Execution Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25498","name":"http://www.securityfocus.com/bid/25498","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PHP 5.2.3 and Prior Versions Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log","name":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml","name":"http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  PHP: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26642","name":"http://secunia.com/advisories/26642","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"PHP Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35437","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35437","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/24922","name":"http://www.securityfocus.com/bid/24922","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PHP Glob() Function Arbitrary Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/36085","name":"http://osvdb.org/36085","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/27102","name":"http://secunia.com/advisories/27102","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Gentoo update for php - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/2547","name":"http://www.vupen.com/english/advisories/2007/2547","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2008/dsa-1572","name":"http://www.debian.org/security/2008/dsa-1572","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1572-1 php5","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.php.net/releases/5_2_4.php","name":"http://www.php.net/releases/5_2_4.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PHP: PHP 5.2.4 Release Announcement","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30158","name":"http://secunia.com/advisories/30158","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Debian update for php5 - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167","name":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.4","name":"http://www.php.net/ChangeLog-5.php#5.2.4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PHP: PHP 5 ChangeLog","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-3806","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3806","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"3806","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"php","cpe5":"php","cpe6":"5.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2007-3806","organization":"Red Hat","lastmodified":"2007-09-05","contributor":"Mark J Cox","statementText":"Not vulnerable. This issue only affected PHP on Windows platforms.","cve_year":"2007","cve_id":"3806","crc32":"003fd5ac"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T14:28:52.456Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"30288","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30288"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167"},{"name":"36085","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/36085"},{"name":"ADV-2007-2547","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/2547"},{"name":"php-glob-security-bypass(35437)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35437"},{"name":"4181","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/4181"},{"name":"DSA-1572","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2008/dsa-1572"},{"name":"GLSA-200710-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.php.net/ChangeLog-5.php#5.2.4"},{"name":"30158","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30158"},{"name":"26085","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26085"},{"name":"DSA-1578","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2008/dsa-1578"},{"name":"27102","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27102"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.php.net/releases/5_2_4.php"},{"name":"24922","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/24922"},{"name":"25498","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25498"},{"name":"26642","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26642"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-07-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"30288","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30288"},{"tags":["x_refsource_MISC"],"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167"},{"name":"36085","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/36085"},{"name":"ADV-2007-2547","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/2547"},{"name":"php-glob-security-bypass(35437)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35437"},{"name":"4181","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/4181"},{"name":"DSA-1572","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2008/dsa-1572"},{"name":"GLSA-200710-02","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.php.net/ChangeLog-5.php#5.2.4"},{"name":"30158","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30158"},{"name":"26085","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26085"},{"name":"DSA-1578","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2008/dsa-1578"},{"name":"27102","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27102"},{"tags":["x_refsource_MISC"],"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.php.net/releases/5_2_4.php"},{"name":"24922","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/24922"},{"name":"25498","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25498"},{"name":"26642","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26642"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-3806","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"30288","refsource":"SECUNIA","url":"http://secunia.com/advisories/30288"},{"name":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167","refsource":"MISC","url":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167"},{"name":"36085","refsource":"OSVDB","url":"http://osvdb.org/36085"},{"name":"ADV-2007-2547","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/2547"},{"name":"php-glob-security-bypass(35437)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35437"},{"name":"4181","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/4181"},{"name":"DSA-1572","refsource":"DEBIAN","url":"http://www.debian.org/security/2008/dsa-1572"},{"name":"GLSA-200710-02","refsource":"GENTOO","url":"http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"},{"name":"http://www.php.net/ChangeLog-5.php#5.2.4","refsource":"CONFIRM","url":"http://www.php.net/ChangeLog-5.php#5.2.4"},{"name":"30158","refsource":"SECUNIA","url":"http://secunia.com/advisories/30158"},{"name":"26085","refsource":"SECUNIA","url":"http://secunia.com/advisories/26085"},{"name":"DSA-1578","refsource":"DEBIAN","url":"http://www.debian.org/security/2008/dsa-1578"},{"name":"27102","refsource":"SECUNIA","url":"http://secunia.com/advisories/27102"},{"name":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log","refsource":"MISC","url":"http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log"},{"name":"http://www.php.net/releases/5_2_4.php","refsource":"CONFIRM","url":"http://www.php.net/releases/5_2_4.php"},{"name":"24922","refsource":"BID","url":"http://www.securityfocus.com/bid/24922"},{"name":"25498","refsource":"BID","url":"http://www.securityfocus.com/bid/25498"},{"name":"26642","refsource":"SECUNIA","url":"http://secunia.com/advisories/26642"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-3806","datePublished":"2007-07-17T00:00:00.000Z","dateReserved":"2007-07-16T00:00:00.000Z","dateUpdated":"2024-08-07T14:28:52.456Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-07-17 00:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-20","CWE-399","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"3806","Ordinal":"1","Title":"CVE-2007-3806","CVE":"CVE-2007-3806","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"3806","Ordinal":"1","NoteData":"The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure.","Type":"Description","Title":"CVE-2007-3806"},{"CveYear":"2007","CveId":"3806","Ordinal":"2","NoteData":"2007-07-16","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"3806","Ordinal":"3","NoteData":"2017-09-28","Type":"Other","Title":"Modified"}]}}}