CVE-2007-1413
HIGH
7.5
CVSS 2.0
Description
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).
Affected products and versions
- PHP — Up to and including 5.2.3
- PHP versions 4.4.6
References
- retrogod.altervista.org http://retrogod.altervista.org/php_446_snmpget_local_bof.html
- secunia.com http://secunia.com/advisories/24440
- www.securityfocus.com http://www.securityfocus.com/bid/22893 Exploit
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/35517
- www.exploit-db.com https://www.exploit-db.com/exploits/3439
- www.exploit-db.com https://www.exploit-db.com/exploits/4204
- nvd.nist.gov Official NVD record