National Vulnerability Database (CVE-2007-1864)

National Cyber-Alert System Vulnerability Summary: CVE-2007-1864
Orirignal release date: 2007-05-08 Source: US-CERT/NIST ### Overview Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors. ### Impact CVSS Severity: 7.5 (High) Range: network Authentication: input buffer="1" Impact Type: avail,conf,int,sec_prot other="1" ### Reference to Advisories, Solutions, and Tools External Source: NSO Name: http://us2.php.net/releases/4_4_7.php patch=1 Hyperlink: http://us2.php.net/releases/4_4_7.php patch=1 External Source: NSO Name: http://us2.php.net/releases/5_2_2.php patch=1 Hyperlink: http://us2.php.net/releases/5_2_2.php patch=1 External Source: MANDRIVA Name: MDKSA-2007:102 Hyperlink: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:102 External Source: MANDRIVA Name: MDKSA-2007:103 Hyperlink: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:103 External Source: REDHAT Name: RHSA-2007:0348 Hyperlink: https://rhn.redhat.com/errata/RHSA-2007-0348.html External Source: REDHAT Name: RHSA-2007:0349 Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0349.html External Source: REDHAT Name: RHSA-2007:0355 Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0355.html External Source: SECTRACK Name: 1018024 Hyperlink: http://www.securitytracker.com/id?1018024 External Source: SECUNIA Name: 25187 Hyperlink: http://secunia.com/advisories/25187 External Source: SECUNIA Name: 25191 Hyperlink: http://secunia.com/advisories/25191 External Source: TRUSTIX Name: 2007-0017 Hyperlink: http://www.trustix.org/errata/2007/0017/ External Source: SECUNIA Name: 25255 Hyperlink: http://secunia.com/advisories/25255 ### Vulnerable Software and Vendor PHP (PHP) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1864