Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-3806

The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure.

Published

2007-07-17T00:30:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

6.4

Weaknesses

Type: Primary
CWE-20
CWE-399

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	php	php	5.2.3	Yes

References

http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167 ([email protected])
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log ([email protected])
http://osvdb.org/36085 ([email protected])
http://secunia.com/advisories/26085 Vendor Advisory ([email protected])
http://secunia.com/advisories/26642 Vendor Advisory ([email protected])
http://secunia.com/advisories/27102 Vendor Advisory ([email protected])
http://secunia.com/advisories/30158 Vendor Advisory ([email protected])
http://secunia.com/advisories/30288 Vendor Advisory ([email protected])
http://www.debian.org/security/2008/dsa-1572 ([email protected])
http://www.debian.org/security/2008/dsa-1578 ([email protected])
http://www.exploit-db.com/exploits/4181 ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml ([email protected])
http://www.php.net/ChangeLog-5.php#5.2.4 ([email protected])
http://www.php.net/releases/5_2_4.php ([email protected])
http://www.securityfocus.com/bid/24922 ([email protected])
http://www.securityfocus.com/bid/25498 ([email protected])
http://www.vupen.com/english/advisories/2007/2547 Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/35437 ([email protected])
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167 (af854a3a-2127-422b-91ae-364da2661108)
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/36085 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/26085 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/26642 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/27102 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30158 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30288 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2008/dsa-1572 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2008/dsa-1578 (af854a3a-2127-422b-91ae-364da2661108)
http://www.exploit-db.com/exploits/4181 (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml (af854a3a-2127-422b-91ae-364da2661108)
http://www.php.net/ChangeLog-5.php#5.2.4 (af854a3a-2127-422b-91ae-364da2661108)
http://www.php.net/releases/5_2_4.php (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/24922 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/25498 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/2547 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/35437 (af854a3a-2127-422b-91ae-364da2661108)