Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2007-1286 | First vendor Publication | 2007-03-06 |
Vendor | Cve | Last vendor Modification | 2018-10-16 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P) | |||
---|---|---|---|
Cvss Base Score | 6.8 | Attack Range | Network |
Cvss Impact Score | 6.4 | Attack Complexity | Medium |
Cvss Expoit Score | 8.6 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter. |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1286 |
OVAL Definitions
CPE : Common Platform Enumeration
OpenVAS Exploits
Date | Description |
---|---|
2012-06-21 | Name : PHP version smaller than 4.4.5 File : nvt/nopsec_php_4_4_5.nasl |
2008-09-24 | Name : Gentoo Security Advisory GLSA 200703-21 (php) File : nvt/glsa_200703_21.nasl |
2008-09-24 | Name : Gentoo Security Advisory GLSA 200705-19 (php) File : nvt/glsa_200705_19.nasl |
2008-01-17 | Name : Debian Security Advisory DSA 1282-1 (php4) File : nvt/deb_1282_1.nasl |
2008-01-17 | Name : Debian Security Advisory DSA 1283-1 (php5) File : nvt/deb_1283_1.nasl |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
32771 | PHP unserialize() ZVAL Reference Counter Remote Overflow PHP contains a flaw that may a context-dependent attacker to elevate privileges. The issue can occur when the unserialize() function is used on an attacker supplied string, which can result in an integer overflow in the refcount variable in _zval_struct through the creation of a large number of references for a specific variable leading to a double destruction of the underlying variable. It is possible that the flaw may allow a remote attacker to execute arbitrary code resulting in a loss of integrity. |
Snort® IPS/IDS
Date | Description |
---|---|
2015-05-08 | PHP 4 unserialize ZVAL Reference Counter Overflow attempt RuleID : 34027 - Revision : 3 - Type : SERVER-OTHER |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2014-10-10 | Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL7859.nasl - Type : ACT_GATHER_INFO |
2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2007-0155.nasl - Type : ACT_GATHER_INFO |
2007-05-29 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200705-19.nasl - Type : ACT_GATHER_INFO |
2007-04-30 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1282.nasl - Type : ACT_GATHER_INFO |
2007-04-30 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1283.nasl - Type : ACT_GATHER_INFO |
2007-04-19 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2007-0155.nasl - Type : ACT_GATHER_INFO |
2007-04-19 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-0154.nasl - Type : ACT_GATHER_INFO |
2007-04-19 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-0155.nasl - Type : ACT_GATHER_INFO |
2007-04-02 | Name : The remote web server uses a version of PHP that is affected by multiple flaws. File : php_4_4_5.nasl - Type : ACT_GATHER_INFO |
2007-03-26 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200703-21.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
Date | Informations |
---|---|
2024-02-02 01:06:06 |
|
2024-02-01 12:02:12 |
|
2023-09-05 12:05:42 |
|
2023-09-05 01:02:04 |
|
2023-09-02 12:05:47 |
|
2023-09-02 01:02:04 |
|
2023-08-12 12:06:46 |
|
2023-08-12 01:02:04 |
|
2023-08-11 12:05:51 |
|
2023-08-11 01:02:07 |
|
2023-08-06 12:05:33 |
|
2023-08-06 01:02:05 |
|
2023-08-04 12:05:39 |
|
2023-08-04 01:02:08 |
|
2023-07-14 12:05:38 |
|
2023-07-14 01:02:06 |
|
2023-03-29 01:06:18 |
|
2023-03-28 12:02:11 |
|
2022-10-11 12:04:58 |
|
2022-10-11 01:01:56 |
|
2021-05-04 12:05:28 |
|
2021-04-22 01:06:01 |
|
2020-05-23 13:16:48 |
|
2020-05-23 01:37:55 |
|
2020-05-23 00:19:23 |
|
2019-06-08 12:02:01 |
|
2019-03-19 12:02:22 |
|
2018-10-16 21:19:51 |
|
2018-10-04 12:04:38 |
|
2017-10-11 09:23:52 |
|
2017-07-29 12:02:04 |
|
2016-10-05 01:00:30 |
|
2016-06-28 16:15:55 |
|
2016-04-26 15:50:23 |
|
2016-03-07 09:24:48 |
|
2016-03-07 05:24:53 |
|
2015-05-08 21:25:34 |
|
2014-10-11 13:25:58 |
|
2014-02-17 10:39:21 |
|
2013-05-11 10:20:16 |
|