PHP MySQL_Connect Remote Buffer Overflow Vulnerability
BID:16145
Info
PHP MySQL_Connect Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 16145 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 05 2006 12:00AM |
| Updated: | Jan 05 2006 12:00AM |
| Credit: | mercenary is credited with the discovery of this vulnerability. |
| Vulnerable: |
PHP PHP 4.4.1 PHP PHP 4.4 .0 PHP PHP 4.3.1 |
| Not Vulnerable: | |
Discussion
PHP MySQL_Connect Remote Buffer Overflow Vulnerability
PHP is prone to a remote buffer overflow vulnerability.
An attacker can exploit this issue to execute arbitrary machine code in the context of the affected Web server. Failed exploit attempts will likely result in crashing the Web server, denying service to legitimate users.
It should be noted that arguments to the 'mysql_connect' function are not usually accessible for modification by remote attackers. This may limit the possible exploitation to legitimate users and administrators in a shared hosting environment.
PHP for Microsoft Windows versions 4.3.10, 4.4.0, and 4.4.1 are vulnerable; other versions may also be affected.
PHP is prone to a remote buffer overflow vulnerability.
An attacker can exploit this issue to execute arbitrary machine code in the context of the affected Web server. Failed exploit attempts will likely result in crashing the Web server, denying service to legitimate users.
It should be noted that arguments to the 'mysql_connect' function are not usually accessible for modification by remote attackers. This may limit the possible exploitation to legitimate users and administrators in a shared hosting environment.
PHP for Microsoft Windows versions 4.3.10, 4.4.0, and 4.4.1 are vulnerable; other versions may also be affected.
Exploit / POC
PHP MySQL_Connect Remote Buffer Overflow Vulnerability
Sample exploit code has been provided.
Sample exploit code has been provided.
Solution / Fix
PHP MySQL_Connect Remote Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP MySQL_Connect Remote Buffer Overflow Vulnerability
References:
References: