PHP STR_Repeat Boundary Condition Error Vulnerability
BID:7259
Info
PHP STR_Repeat Boundary Condition Error Vulnerability
| Bugtraq ID: | 7259 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 02 2003 12:00AM |
| Updated: | Apr 02 2003 12:00AM |
| Credit: | Discovery credited to Sir Mordred <[email protected]>. |
| Vulnerable: |
PHP PHP 4.3.1 PHP PHP 4.3 PHP PHP 4.2.3 PHP PHP 4.2.2 PHP PHP 4.2.1 PHP PHP 4.2 .0 PHP PHP 4.1.2 PHP PHP 4.1.1 PHP PHP 4.1 .0 |
| Not Vulnerable: | |
Discussion
PHP STR_Repeat Boundary Condition Error Vulnerability
It has been reported that a buffer overrun exists in the PHP program. Because of this, an attacker may be able to execute arbitrary code.
It has been reported that a buffer overrun exists in the PHP program. Because of this, an attacker may be able to execute arbitrary code.
Exploit / POC
PHP STR_Repeat Boundary Condition Error Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
PHP STR_Repeat Boundary Condition Error Vulnerability
Solution:
Gentoo Linux has corrected this vulnerability in their PHP/mod_php packages. Users are advised to run the following commands:
emerge sync
emerge mod_php
and/or
emerge php
emerge clean
Currently we are not aware of any other vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Gentoo Linux has corrected this vulnerability in their PHP/mod_php packages. Users are advised to run the following commands:
emerge sync
emerge mod_php
and/or
emerge php
emerge clean
Currently we are not aware of any other vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP STR_Repeat Boundary Condition Error Vulnerability
References:
References:
- PHP Homepage (PHP Group)
- @(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function (Sir Mordred