high7.5Public exploit code
CVE-2007-1413
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-d…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP 5.2.3 - 'snmpget()' object id Local Buffer Overflow (EDI)2007-08-09 · local · windows · Verified
- PHP 5.2.3 - 'snmpget()' Object id Local Buffer Overflow2007-07-20 · local · windows · Verified
- PHP 4.4.6 - 'snmpget()' Object id Local Buffer Overflow2007-03-09 · local · windows · Verified
Impact
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | through 5.2.3 Version 4.4.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://retrogod.altervista.org/php_446_snmpget_local_bof.html
- http://secunia.com/advisories/24440
- http://www.securityfocus.com/bid/22893
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35517
- https://www.exploit-db.com/exploits/3439
- https://www.exploit-db.com/exploits/4204
- http://retrogod.altervista.org/php_446_snmpget_local_bof.html
- http://secunia.com/advisories/24440
- http://www.securityfocus.com/bid/22893
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35517
- https://www.exploit-db.com/exploits/3439
- https://www.exploit-db.com/exploits/4204