PHP Glob() Function Arbitrary Code Execution Vulnerability
BID:24922
Info
PHP Glob() Function Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 24922 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3806 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 16 2007 12:00AM |
| Updated: | May 20 2008 02:14PM |
| Credit: | Shinnai is credited with the discovery of this vulnerability. |
| Vulnerable: |
PHP PHP 5.2.3 PHP PHP 5.2.2 PHP PHP 5.2.1 PHP PHP 5.1.6 PHP PHP 5.1.5 PHP PHP 5.1.4 PHP PHP 5.1.3 -RC1 PHP PHP 5.1.3 PHP PHP 5.1.2 PHP PHP 5.1.1 PHP PHP 5.1 PHP PHP 5.0.5 PHP PHP 5.0.4 PHP PHP 5.0.3 PHP PHP 5.0.2 PHP PHP 5.0.1 PHP PHP 5.0 candidate 3 PHP PHP 5.0 candidate 2 PHP PHP 5.0 candidate 1 PHP PHP 5.0 .0 PHP PHP 4.4.7 PHP PHP 4.4.6 PHP PHP 4.4.5 PHP PHP 4.4.4 PHP PHP 4.4.3 PHP PHP 4.4.2 PHP PHP 4.4.1 PHP PHP 4.4 .0 PHP PHP 4.3.11 PHP PHP 4.3.10 PHP PHP 4.3.9 PHP PHP 4.3.8 PHP PHP 4.3.7 PHP PHP 4.3.6 PHP PHP 4.3.5 PHP PHP 4.3.4 PHP PHP 4.3.3 PHP PHP 4.3.2 PHP PHP 4.3.1 PHP PHP 4.3 PHP PHP 4.2.3 PHP PHP 4.2.2 PHP PHP 4.2.1 PHP PHP 4.2 .0 PHP PHP 4.2 -dev PHP PHP 4.1.2 PHP PHP 4.1.1 PHP PHP 4.1 .0 PHP PHP 4.0.7 RC3 PHP PHP 4.0.7 RC2 PHP PHP 4.0.7 RC1 PHP PHP 4.0.7 PHP PHP 4.0.6 PHP PHP 4.0.5 PHP PHP 4.0.4 PHP PHP 4.0.3 pl1 PHP PHP 4.0.3 PHP PHP 4.0.2 PHP PHP 4.0.1 pl2 PHP PHP 4.0.1 pl1 PHP PHP 4.0.1 PHP PHP 4.0 0 PHP PHP 5.2 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
PHP PHP 5.2.4 |
Discussion
PHP Glob() Function Arbitrary Code Execution Vulnerability
PHP is prone to a vulnerability that lets attackers execute arbitrary code.
An attacker can exploit this issue to execute arbitrary machine code in the context of the affected application or to cause denial-of-service conditions.
This issue affects PHP 5.2.3 and 4.4.4. Other versions may also be affected.
PHP is prone to a vulnerability that lets attackers execute arbitrary code.
An attacker can exploit this issue to execute arbitrary machine code in the context of the affected application or to cause denial-of-service conditions.
This issue affects PHP 5.2.3 and 4.4.4. Other versions may also be affected.
Exploit / POC
PHP Glob() Function Arbitrary Code Execution Vulnerability
The following proof of concept is available:
The following proof of concept is available:
Solution / Fix
PHP Glob() Function Arbitrary Code Execution Vulnerability
Solution:
The vendor has released PHP 5.2.4. Please see the referenced advisories for more information.
PHP PHP 5.2.3
Solution:
The vendor has released PHP 5.2.4. Please see the referenced advisories for more information.
PHP PHP 5.2.3
-
PHP PHP 5.2.4 Complete Source Code
http://www.php.net/get/php-5.2.4.tar.gz/from/a/mirror
References
PHP Glob() Function Arbitrary Code Execution Vulnerability
References:
References:
- PHP 5.2.4 Release Announcement (PHP)
- PHP Homepage (PHP Group)
- PHP Manual Glob() Function (PHP )
- PHP Version 5.2.4 Changelog (PHP)