CVE-2007-2510
MEDIUM
5.1
CVSS 2.0
Description
Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.
Affected products and versions
- PHP versions 4.0.0, 4.0.1, 4.0.1patch1, 4.0.1patch2, 4.0.2, 4.0.3, 4.0.3patch1, 4.0.4, 4.0.4patch1, 4.0.5, 4.0.6, 4.0.7, 4.0.7rc1, 4.0.7rc2, 4.0.7rc3, 4.1.0, 4.1.1, 4.1.2, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.10, 4.3.11, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.4.4, 4.4.5, 4.4.6, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0rc1, 5.0rc2, 5.0rc3, 5.1.0, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.2.0, 5.2.1
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
- osvdb.org http://osvdb.org/34675
- secunia.com http://secunia.com/advisories/25187 Vendor Advisory
- secunia.com http://secunia.com/advisories/25191 Vendor Advisory
- secunia.com http://secunia.com/advisories/25255 Vendor Advisory
- secunia.com http://secunia.com/advisories/25318 Vendor Advisory
- secunia.com http://secunia.com/advisories/25372
- secunia.com http://secunia.com/advisories/25445
- secunia.com http://secunia.com/advisories/26048
- security.gentoo.org http://security.gentoo.org/glsa/glsa-200705-19.xml
- us2.php.net http://us2.php.net/releases/5_2_2.php
- viewcvs.php.net http://viewcvs.php.net/viewvc.cgi/php-src/ext/soap/php_http.c?r1=1.77.2.11.2.5&r2=1.77.2.11.2.6
- www.debian.org http://www.debian.org/security/2007/dsa-1295
- www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:102
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0355.html
- www.securityfocus.com http://www.securityfocus.com/bid/23813
- www.securityfocus.com http://www.securityfocus.com/bid/24034
- www.securitytracker.com http://www.securitytracker.com/id?1018023
- www.trustix.org http://www.trustix.org/errata/2007/0017/
- www.ubuntu.com http://www.ubuntu.com/usn/usn-462-1
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10715
- rhn.redhat.com https://rhn.redhat.com/errata/RHSA-2007-0348.html
- nvd.nist.gov Official NVD record