15 matches found
CVE-2007-1521
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the sessionregenerateid function, as demonstrated by calling a userspace error handler or triggering a memory limit violation...
PHP <= 5.2.1 session_regenerate_id() Double Free Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
Ubuntu Update for php5 vulnerabilities USN-455-1
Ubuntu Update for Linux kernel vulnerabilities USN-455-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4551.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 vulnerabilities USN-455-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
GLSA-200705-19 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200705-19 PHP: Multiple vulnerabilities Several vulnerabilities were found in PHP, most of them during the Month Of PHP Bugs MOPB by Stefan Esser. The most severe of these vulnerabilities are integer overflows in wbmp.c from the G...
FreeBSD : php -- multiple vulnerabilities (f5e52bf5-fc77-11db-8163-000e0c2e438a)
The PHP development team reports : Security Enhancements and Fixes in PHP 5.2.2 and PHP 4.4.7 : - Fixed CVE-2007-1001, GD wbmp used with invalid image size - Fixed asciiz byte truncation inside mail - Fixed a bug in mbparsestr that can be used to activate registerglobals - Fixed unallocated memor...
Debian DSA-1282-1 : php4 - several vulnerabilities
Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1286 Stefan Esser discovered an overflow ...
Double free
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the sessionregenerateid function, as demonstrated by calling a userspace error handler or triggering a memory limit violation...
CVE-2007-1521
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the sessionregenerateid function, as demonstrated by calling a userspace error handler or triggering a memory limit violation...
CVE-2007-1521
CVE-2007-1521 is a PHP double-free vulnerability that affects PHP 4.x and 5.x (before 4.4.7 and 5.2.2). The issue allows context-dependent attackers to cause arbitrary code execution by interrupting session_regenerate_id (e.g., via a userspace error handler or memory-limit violation). Public deta...
MOPB-session.txt
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
PHP invalid session id and session_regenerate_id() function double free() vulnerability
Race conditions on session identifier freeing can lead to double free operation...
PHP Session_Regenerate_ID函数双释放内存破坏漏洞
PHP是一款广泛使用的WEB开发脚本语言。 PHP SessionRegenerateID函数存在双释放内容破坏问题，远程攻击者可利用此漏洞对应用程序进行拒绝服务攻击，可能导致任意指令执行。 sessionregenerateid函数最先会释放旧的会话识别器，然后马上分配由会话识别生成器生成的新值： PHPFUNCTIONsessionregenerateid ... if PSid ... efreePSid; PSid = PSmod-screatesid&PSmoddata, NULL TSRMLSCC; PSsendcookie = 1;...
MOPB-22-2007:PHP session_regenerate_id() Double Free Vulnerability
Summary The sessionregenerateid function that is used to generate a new session identifier fails to clear an already freed pointer to the former session identifier before calling the session identifier generator. When this generator triggers an error this can result in a double free that is easil...
PHP 5.2.1 - 'session_regenerate_id()' Double-Free
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
PHP <= 5.2.1 session_regenerate_id() Double Free Exploit
Exploit for linux platform in category local exploits ======================================================== PHP = 5.2.1 sessionregenerateid Double Free Exploit ======================================================== ?php ////////////////////////////////////////////////////////////////////////...