Lucene search
Ubuntu.comUB:CVE-2011-1938HistoryMay 31, 2011 - 12:00 a.m.
CVE-2011-1938
2011-05-3100:00:00
ubuntu.com
ubuntu.com
8
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.2%
Stack-based buffer overflow in the socket_connect function in
ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow
context-dependent attackers to execute arbitrary code via a long pathname
for a UNIX socket.
Bugs
- <https://bugs.launchpad.net/ubuntu/+source/php5/+bug/813110>
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1938>
Notes
| Author | Note |
|---|---|
| jdstrand | PoC in http://www.exploit-db.com/exploits/17318/ stack-protector should reduce to DoS, downgrading to low |
| mdeslaur | says 5.3.3, but reproducer works on lucid also another PoC: http://www.exploit-db.com/exploits/17486/ |
Related
packetstorm
packetstorm
PHP 5.3.6 Buffer Overflow
2011-07-03 00:00:00
PHP Socket connect() Stack Buffer Overflow
2011-05-25 00:00:00
seebug
seebug
PHP <= 5.3.5 socket_connect() Buffer Overflow Vulnerability
2014-07-01 00:00:00
PHP 5.3.6 Buffer Overflow PoC (ROP) CVE-2011-1938
2011-07-05 00:00:00
PHP <= 5.3.5 socket_connect() Buffer Overflow Vulnerability
2011-05-26 00:00:00
prion
prion
Stack overflow
2011-05-31 20:55:00
openvas
openvas
PHP 'socket_connect()' Buffer Overflow Vulnerability - Windows
2011-06-02 00:00:00
FreeBSD Ports: php5, php5-sockets
2011-09-21 00:00:00
Slackware: Security Advisory (SSA:2011-237-01)
2012-09-10 00:00:00
cve
cve
CVE-2011-1938
2011-05-31 20:55:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:03:26
exploitpack
exploitpack
PHP 5.3.5 - socket_connect() Local Buffer Overflow
2011-05-25 00:00:00
PHP 5.3.6 - Local Buffer Overflow (ROP)
2011-07-04 00:00:00
exploitdb
exploitdb
PHP 5.3.6 - Local Buffer Overflow (ROP)
2011-07-04 00:00:00
PHP 5.3.5 - 'socket_connect()' Local Buffer Overflow
2011-05-25 00:00:00
slackware
slackware
[slackware-security] php
2011-08-25 16:35:35
freebsd
freebsd
php -- multiple vulnerabilities
2011-08-18 00:00:00
nessus
nessus
PHP 5.3 < 5.3.7 Multiple Vulnerabilities
2011-08-23 00:00:00
PHP 5.3.x < 5.3.7 Multiple Vulnerabilities
2011-08-23 00:00:00
securityvulns
securityvulns
[slackware-security] php (SSA:2011-237-01)
2011-08-27 00:00:00
PHP multiple security vulnerabilities
2011-08-27 00:00:00
[ MDVSA-2012:071 ] php
2012-05-14 00:00:00
debian
debian
[SECURITY] [DSA 2399-2] php5 regression fix
2012-01-31 15:26:47
[SECURITY] [DSA 2399-1] php5 security update
2012-01-31 07:22:58
fedora
fedora
[SECURITY] Fedora 16 Update: php-5.3.8-1.fc16
2011-09-09 17:13:35
[SECURITY] Fedora 15 Update: maniadrive-1.2-32.fc15
2011-09-18 23:00:38
[SECURITY] Fedora 14 Update: php-5.3.8-1.fc14
2011-09-18 22:59:22
osv
osv
php5 - several
2012-01-31 00:00:00
amazon
amazon
Important: php
2011-10-11 00:07:00
f5
f5
SOL15903 - Multiple PHP vulnerabilities
2014-12-11 00:00:00
K15903 : Multiple PHP vulnerabilities
2014-12-11 00:00:00
ubuntu
ubuntu
PHP Vulnerabilities
2011-10-18 00:00:00
redhat
redhat
(RHSA-2011:1423) Moderate: php53 and php security update
2011-11-02 00:00:00
centos
centos
php53 security update
2011-11-03 03:59:22
oraclelinux
oraclelinux
php53 and php security update
2011-11-02 00:00:00
php security update
2012-06-29 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2011-10-10 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.2%
Related for UB:CVE-2011-1938