CVE-2011-1938
HIGH severity · CVSS 7.5 · Memory corruption
7.5CVSS HIGH
Summary
Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)23%
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Official patch: http://openwall.com/lists/oss-security/2011/05/24/1 ↗
Additional information
- NVD record
- http://openwall.com/lists/oss-security/2011/05/24/1Patch
- http://openwall.com/lists/oss-security/2011/05/24/9Patch
- http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
- http://marc.info/?l=bugtraq&m=133469208622507&w=2
- http://osvdb.org/72644
- http://securityreason.com/securityalert/8262
- http://securityreason.com/securityalert/8294
- http://support.apple.com/kb/HT5130