CVE-2007-1413

Published: Mar 12, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).

Affected (2)

Products: Php: Php

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.2.3
Php Php	Version 4.4.6

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://retrogod.altervista.org/php_446_snmpget_local_bof.html

Source: cve@mitre.org

http://secunia.com/advisories/24440

Source: cve@mitre.org

http://www.securityfocus.com/bid/22893

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/35517

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3439

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4204

Source: cve@mitre.org

http://retrogod.altervista.org/php_446_snmpget_local_bof.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24440

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22893

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/35517

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/3439

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/4204

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.