NetSight
IP …
critical9.8Public exploit code

CVE-2016-4071

Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote att…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.

Affected products

VendorProductAffected versions
PhpPhp
Versions 5.6.0, 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5
AppleMac Os X
through 10.11.4

Weakness classification

CWE-20

References