PHP 5 'php_sprintf_appendstring()' Remote Integer Overflow Vulnerability

Bugtraq ID:	28392
Class:	Boundary Condition Error
CVE:	CVE-2008-1384
Remote:	Yes
Local:	No
Published:	Mar 21 2008 12:00AM
Updated:	Jan 28 2009 11:29PM
Credit:	Maksymilian Arciemowicz (cXIb8O3) of SecurityReason
Vulnerable:	Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 11 x64 Turbolinux Turbolinux Server 11 Turbolinux Turbolinux Server 10.0.0 x64 TurboLinux Personal TurboLinux Multimedia Turbolinux Client 2008 Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Appliance Server Hosting Edition 1.0 Turbolinux Appliance Server 1.0 Workgroup Edition Turbolinux Appliance Server 1.0 Hosting Edition Turbolinux Appliance Server 3.0 x64 Turbolinux Appliance Server 3.0 Turbolinux Appliance Server 2.0 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise Server 10 SP1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 rPath rPath Linux 2 rPath rPath Linux 1 rPath Appliance Platform Linux Service 1 PHP PHP 5.2.5 PHP PHP 5.2.4 PHP PHP 5.2.3 PHP PHP 5.2.2 PHP PHP 5.2.1 + Ubuntu Ubuntu Linux 7.04 sparc + Ubuntu Ubuntu Linux 7.04 powerpc + Ubuntu Ubuntu Linux 7.04 i386 + Ubuntu Ubuntu Linux 7.04 amd64 PHP PHP 5.1.6 + Ubuntu Ubuntu Linux 6.10 sparc + Ubuntu Ubuntu Linux 6.10 powerpc + Ubuntu Ubuntu Linux 6.10 i386 + Ubuntu Ubuntu Linux 6.10 amd64 PHP PHP 5.1.5 PHP PHP 5.1.4 PHP PHP 5.1.3 -RC1 PHP PHP 5.1.3 PHP PHP 5.1.2 + Ubuntu Ubuntu Linux 6.06 LTS sparc + Ubuntu Ubuntu Linux 6.06 LTS powerpc + Ubuntu Ubuntu Linux 6.06 LTS i386 + Ubuntu Ubuntu Linux 6.06 LTS amd64 PHP PHP 5.1.1 PHP PHP 5.1 PHP PHP 5.0.5 PHP PHP 5.0.4 PHP PHP 5.0.3 + Trustix Secure Linux 2.2 PHP PHP 5.0.2 PHP PHP 5.0.1 PHP PHP 5.0 candidate 3 PHP PHP 5.0 candidate 2 PHP PHP 5.0 candidate 1 PHP PHP 5.0 .0 PHP PHP 5.2 + Debian Linux 4.0 sparc + Debian Linux 4.0 s/390 + Debian Linux 4.0 powerpc + Debian Linux 4.0 mipsel + Debian Linux 4.0 mips + Debian Linux 4.0 m68k + Debian Linux 4.0 ia-64 + Debian Linux 4.0 ia-32 + Debian Linux 4.0 hppa + Debian Linux 4.0 arm + Debian Linux 4.0 amd64 + Debian Linux 4.0 alpha + Debian Linux 4.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

PHP 5 'php_sprintf_appendstring()' Remote Integer Overflow Vulnerability

PHP 5 is prone to an integer-overflow vulnerability because the software fails to ensure that integer values are not overrun.

Successful exploits of this vulnerability allow remote attackers to execute arbitrary machine code in the context of a webserver affected by the issue. Failed attempts will likely result in denial-of-service conditions.

PHP 5.2.5 and prior versions are vulnerable.

PHP 5 'php_sprintf_appendstring()' Remote Integer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PHP 5 'php_sprintf_appendstring()' Remote Integer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva lib64php5_common5-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-bcmath-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-bz2-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-calendar-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-cgi-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-cli-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ctype-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-curl-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dba-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dbase-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-devel-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dom-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-exif-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-fcgi-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-filter-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ftp-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gd-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gettext-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gmp-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-hash-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-iconv-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-imap-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-json-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ldap-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mbstring-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mcrypt-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mhash-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mime_magic-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ming-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mssql-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mysql-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mysqli-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ncurses-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-odbc-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-openssl-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pcntl-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_dblib-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_mysql-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_odbc-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_pgsql-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_sqlite-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pgsql-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-posix-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pspell-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-readline-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-recode-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-session-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-shmop-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-simplexml-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-snmp-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-soap-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sockets-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sqlite-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvmsg-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvsem-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvshm-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tidy-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tokenizer-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-wddx-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xml-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlreader-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlrpc-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlwriter-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xsl-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-zlib-5.2.4-3.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0

• Mandriva libphp5_common5-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-bcmath-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-bz2-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-calendar-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-cgi-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-cli-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ctype-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-curl-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dba-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dbase-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-devel-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dom-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-exif-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-fcgi-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-filter-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ftp-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gd-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gettext-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gmp-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-hash-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-iconv-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-imap-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-json-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ldap-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mbstring-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mcrypt-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mhash-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mime_magic-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ming-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mssql-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mysql-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mysqli-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ncurses-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-odbc-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-openssl-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pcntl-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_dblib-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_mysql-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_odbc-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_pgsql-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_sqlite-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pgsql-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-posix-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pspell-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-readline-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-recode-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-session-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-shmop-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-simplexml-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-snmp-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-soap-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sockets-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sqlite-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvmsg-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvsem-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvshm-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tidy-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tokenizer-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-wddx-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xml-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlreader-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlrpc-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlwriter-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xsl-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-zlib-5.2.4-3.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

PHP 5 'php_sprintf_appendstring()' Remote Integer Overflow Vulnerability

References:

• PHP Homepage (PHP)
  
• Revision 1.2027.2.547.2.1120 (PHP)
  
• {securityreason.com}PHP 5 *printf() - Integer Overflow ([email protected])