high7.5
CVE-2007-1864
Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
Impact
Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | before 4.4.7 from 5.1.0 through 5.1.6 from 5.2.0 before 5.2.2 |
| Debian | Debian Linux | Versions 3.1, 4.0 |
| Canonical | Ubuntu Linux | Versions 6.06, 6.10, 7.04 |
| Redhat | Enterprise Linux Server | Version 5.0 |
| Redhat | Enterprise Linux Workstation | Version 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
- http://osvdb.org/34674
- http://secunia.com/advisories/25187
- http://secunia.com/advisories/25191
- http://secunia.com/advisories/25255
- http://secunia.com/advisories/25445
- http://secunia.com/advisories/25660
- http://secunia.com/advisories/25938
- http://secunia.com/advisories/25945
- http://secunia.com/advisories/26048
- http://secunia.com/advisories/26102
- http://secunia.com/advisories/27377
- http://security.gentoo.org/glsa/glsa-200705-19.xml
- http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm
- http://us2.php.net/releases/4_4_7.php
- http://us2.php.net/releases/5_2_2.php
- http://www.debian.org/security/2007/dsa-1330
- http://www.debian.org/security/2007/dsa-1331
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:102
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:103
- http://www.redhat.com/support/errata/RHSA-2007-0349.html
- http://www.redhat.com/support/errata/RHSA-2007-0355.html
- http://www.securityfocus.com/bid/23813
- http://www.securitytracker.com/id?1018024
- http://www.trustix.org/errata/2007/0017/