CVE-2007-0910
HIGH
10.0
CVSS 2.0
Description
Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.
Affected products and versions
- PHP — Up to and including 5.2.0
- PHP versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.15, 3.0.16, 3.0.17, 3.0.18, 4.0, 4.0.1, 4.0.1patch1, 4.0.1patch2, 4.0.2, 4.0.3, 4.0.3patch1, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.7rc1, 4.0.7rc2, 4.0.7rc3, 4.1.0, 4.1.1, 4.1.2, 4.2, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.10, 4.3.11, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.4.4, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0rc1, 5.0rc2, 5.0rc3, 5.1.0, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6
References
- lists.suse.com http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html
- osvdb.org http://osvdb.org/32763
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2007-0089.html
- secunia.com http://secunia.com/advisories/24089 Vendor Advisory
- secunia.com http://secunia.com/advisories/24195 Vendor Advisory
- secunia.com http://secunia.com/advisories/24217 Vendor Advisory
- secunia.com http://secunia.com/advisories/24236 Vendor Advisory
- secunia.com http://secunia.com/advisories/24248 Vendor Advisory
- secunia.com http://secunia.com/advisories/24284 Vendor Advisory
- secunia.com http://secunia.com/advisories/24295 Vendor Advisory
- secunia.com http://secunia.com/advisories/24322 Vendor Advisory
- secunia.com http://secunia.com/advisories/24419 Vendor Advisory
- secunia.com http://secunia.com/advisories/24421 Vendor Advisory
- secunia.com http://secunia.com/advisories/24432 Vendor Advisory
- secunia.com http://secunia.com/advisories/24514 Vendor Advisory
- secunia.com http://secunia.com/advisories/24606 Vendor Advisory
- secunia.com http://secunia.com/advisories/24642 Vendor Advisory
- secunia.com http://secunia.com/advisories/24945 Vendor Advisory
- security.gentoo.org http://security.gentoo.org/glsa/glsa-200703-21.xml
- support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm
- support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm
- www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:048
- www.openpkg.com http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html
- www.php.net http://www.php.net/ChangeLog-5.php#5.2.1
- www.php.net http://www.php.net/releases/5_2_1.php
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0076.html
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0081.html
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0082.html
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0088.html
- www.securityfocus.com http://www.securityfocus.com/archive/1/461462/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/archive/1/466166/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/bid/22496 Patch
- www.securitytracker.com http://www.securitytracker.com/id?1017671
- www.trustix.org http://www.trustix.org/errata/2007/0009/
- www.ubuntu.com http://www.ubuntu.com/usn/usn-424-1
- www.ubuntu.com http://www.ubuntu.com/usn/usn-424-2
- www.us.debian.org http://www.us.debian.org/security/2007/dsa-1264
- www.vupen.com http://www.vupen.com/english/advisories/2007/0546 Vendor Advisory
- issues.rpath.com https://issues.rpath.com/browse/RPL-1088
- issues.rpath.com https://issues.rpath.com/browse/RPL-1268
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9514
- nvd.nist.gov Official NVD record