CVE-2007-1401

Buffer overflow in the crack extension CrackLib, as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crackopendict function...

CVE-2007-1401

CVE-2007-1401 describes a buffer overflow in the CrackLib crack_opendict function, affecting PHP bundles (notably PHP 4.4.6 and older than 5.0.0). The overflow is triggered by a long argument and could enable local privilege escalation. The NVD entry lists a MEDIUM base score (6.9, AV:L/AC:M/Au:N...