CVE-2007-2748

2007-05-1700:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.8%

JSON

The substr_count function in PHP 5.2.1 and earlier allows context-dependent
attackers to obtain sensitive information via unspecified vectors, a
different affected function than CVE-2007-1375.

Notes

Author	Note
kees	Ubuntu (and Debian) were not affected by this CVE. We used a correct fix to CVE-2007-1375, so this CVE was not a problem.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchphp5< 5.1.2-1ubuntu3.9UNKNOWN
ubuntu6.10noarchphp5< 5.1.6-1ubuntu2.6UNKNOWN
ubuntu7.04noarchphp5< 5.2.1-0ubuntu1.4UNKNOWN