Lucene search

K
cve[email protected]CVE-2007-1411
HistoryMar 10, 2007 - 10:19 p.m.

CVE-2007-1411

2007-03-1022:19:00
web.nvd.nist.gov
23
cve-2007-1411
buffer overflow
php
nvd
code execution
remote code execution
security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.102 Low

EPSS

Percentile

95.0%

Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary code via long server name arguments to the (1) mssql_connect and (2) mssql_pconnect functions.

Affected configurations

NVD
Node
phpphpRange4.4.6
CPENameOperatorVersion
php:phpphple4.4.6

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.102 Low

EPSS

Percentile

95.0%