Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2007-3997
HistorySep 04, 2007 - 12:00 a.m.

CVE-2007-3997

2007-09-0400:00:00
ubuntu.com
ubuntu.com
10

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.101 Low

EPSS

Percentile

94.8%

JSON

The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5
before 5.2.4, allow remote attackers to bypass safe_mode and open_basedir
restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query
with LOAD DATA LOCAL INFILE.

Notes

Author Note
kees safe_mode/open_basedir not supported

Related

prion 2
exploitpack 1
redhatcve 2
seebug 3
cve 2
exploitdb 1
ubuntucve 1
f5 2
nessus 3
openvas 7
oraclelinux 1
freebsd 1
gentoo 1
prion
prion
Design/Logic Flaw
2007-09-04 18:17:00
Design/Logic Flaw
2007-09-14 01:17:00
exploitpack
exploitpack
PHP 4.4.75.2.3 - MySQLMySQLi Safe_Mode Bypass
2007-09-10 00:00:00
redhatcve
redhatcve
CVE-2007-3997
2015-10-30 10:13:33
CVE-2007-4889
2015-10-30 09:54:31
seebug
seebug
PHP <= 4.4.7 / 5.2.3 MySQL/MySQLi Safe Mode Bypass Vulnerability
2014-07-01 00:00:00
PHP &lt;= 4.4.7 / 5.2.3 MySQL/MySQLi Safe Mode Bypass Vulnerability
2007-09-10 00:00:00
PHP MySQL/MySQLi扩展绕过安全限制漏洞
2007-09-05 00:00:00
cve
cve
CVE-2007-3997
2007-09-04 18:17:00
CVE-2007-4889
2007-09-14 01:17:00
exploitdb
exploitdb
PHP 4.4.7/5.2.3 - MySQL/MySQLi &#039;Safe_Mode&#039; Bypass
2007-09-10 00:00:00
ubuntucve
ubuntucve
CVE-2007-4889
2007-09-14 00:00:00
f5
f5
K31530542 : PHP vulnerabilities CVE-2007-1777, CVE-2007-3997, CVE-2007-4657, CVE-2008-3658, and CVE-2008-3659
2016-10-20 00:00:00
SOL31530542 - PHP vulnerabilities CVE-2007-1777, CVE-2007-3997, CVE-2007-4657, CVE-2008-3658, and CVE-2008-3659
2016-10-20 00:00:00
nessus
nessus
PHP < 4.4.8 Multiple Vulnerabilities
2008-01-03 00:00:00
FreeBSD : php -- multiple vulnerabilities (71d903fc-602d-11dc-898c-001921ab2fa4)
2007-09-14 00:00:00
GLSA-200710-02 : PHP: Multiple vulnerabilities
2007-10-09 00:00:00
openvas
openvas
PHP < 4.4.8 Multiple Vulnerabilities
2012-06-21 00:00:00
PHP < 4.4.8 Multiple Vulnerabilities
2020-08-17 00:00:00
Oracle: Security Advisory (ELSA-2007-0890)
2015-10-08 00:00:00
oraclelinux
oraclelinux
Moderate: php security update
2007-09-20 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2007-08-30 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2007-10-07 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.101 Low

EPSS

Percentile

94.8%

JSON
Related for UB:CVE-2007-3997
prion2exploitpack1redhatcve2seebug3cve2exploitdb1ubuntucve1f52nessus3openvas7oraclelinux1freebsd1gentoo1