CVE-2007-1401
published 2007-03-10CVE-2007-1401: Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a…
PriorityP424medium6.9CVSS 2.0
AVLACMAuNCCICAC
EXPLOIT
EPSS
0.74%
50.1th percentile
Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crack_opendict function.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| php | php | — | — |
CVSS provenance
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat6.9MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
CVE-2007-1401: Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4
vendor_redhat·CVSS 6.9
CVE-2007-1401 [MEDIUM] CVE-2007-1401: Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4
Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crack_opendict function.
Statement: Not vulnerable. PHP as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5 does not include Cracklib support.
GHSA
GHSA-qw5p-mqmr-476h: Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4
ghsa_unreviewed·2022-05-01
CVE-2007-1401 [MEDIUM] GHSA-qw5p-mqmr-476h: Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4
Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crack_opendict function.
No detection rules found.
No writeups or analysis indexed.
http://retrogod.altervista.org/php_446_crack_opendict_local_bof.htmlhttp://securityreason.com/securityalert/2405http://www.securityfocus.com/archive/1/462226/100/0/threadedhttps://www.exploit-db.com/exploits/3431http://retrogod.altervista.org/php_446_crack_opendict_local_bof.htmlhttp://securityreason.com/securityalert/2405http://www.securityfocus.com/archive/1/462226/100/0/threadedhttps://www.exploit-db.com/exploits/3431
2007-03-10
Published