CVE-2011-1938
published 2011-05-31CVE-2011-1938: Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to…
PriorityP357high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
22.72%
97.4th percentile
Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wxhc-rwm9-xjjx: Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets
ghsa_unreviewed·2022-05-17
CVE-2011-1938 [HIGH] CWE-119 GHSA-wxhc-rwm9-xjjx: Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets
Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.
Ubuntu
PHP Vulnerabilities
vendor_ubuntu·2011-10-18·CVSS 7.5
CVE-2010-1914 [HIGH] PHP Vulnerabilities
Title: PHP Vulnerabilities
Summary: Several security issues were fixed in PHP.
Mateusz Kocielski, Marek Kroemeke and Filip Palian discovered that a
stack-based buffer overflow existed in the socket_connect function's
handling of long pathnames for AF_UNIX sockets. A remote attacker
might be able to exploit this to execute arbitrary code; however,
the default compiler options for affected releases should reduce
the vulnerability to a denial of service. This issue affected Ubuntu
10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04. (CVE-2011-1938)
Krzysztof Kotowicz discovered that the PHP post handler function
does not properly restrict filenames in multipart/form-data POST
requests. This may allow remote attackers to conduct absolute
path traversal attacks and possibly create or overwrite arbitrar
Red Hat
php: stack-based buffer overflow in socket_connect()
vendor_redhat·2011-05-23·CVSS 7.5
CVE-2011-1938 [HIGH] CWE-121 php: stack-based buffer overflow in socket_connect()
php: stack-based buffer overflow in socket_connect()
Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.
Statement: Not vulnerable. This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 4 and 5. It has been addressed in Red Hat Enterprise Linux 5 (php53) and 6 (php).
Package: php (Red Hat Enterprise Linux 4) - Not affected
Package: php (Red Hat Enterprise Linux 5) - Not affected
No detection rules found.
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlhttp://marc.info/?l=bugtraq&m=133469208622507&w=2http://openwall.com/lists/oss-security/2011/05/24/1http://openwall.com/lists/oss-security/2011/05/24/9http://osvdb.org/72644http://securityreason.com/securityalert/8262http://securityreason.com/securityalert/8294http://support.apple.com/kb/HT5130http://svn.php.net/viewvc/php/php-src/trunk/ext/sockets/sockets.c?r1=311369&r2=311368&pathrev=311369http://svn.php.net/viewvc?view=revision&revision=311369http://www.debian.org/security/2012/dsa-2399http://www.exploit-db.com/exploits/17318/http://www.mandriva.com/security/advisories?name=MDVSA-2011:165http://www.php.net/ChangeLog-5.php#5.3.7http://www.php.net/archive/2011.php#id2011-08-18-1http://www.redhat.com/support/errata/RHSA-2011-1423.htmlhttp://www.securityfocus.com/bid/49241https://exchange.xforce.ibmcloud.com/vulnerabilities/67606http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlhttp://marc.info/?l=bugtraq&m=133469208622507&w=2http://openwall.com/lists/oss-security/2011/05/24/1http://openwall.com/lists/oss-security/2011/05/24/9http://osvdb.org/72644http://securityreason.com/securityalert/8262http://securityreason.com/securityalert/8294http://support.apple.com/kb/HT5130http://svn.php.net/viewvc/php/php-src/trunk/ext/sockets/sockets.c?r1=311369&r2=311368&pathrev=311369http://svn.php.net/viewvc?view=revision&revision=311369http://www.debian.org/security/2012/dsa-2399http://www.exploit-db.com/exploits/17318/http://www.mandriva.com/security/advisories?name=MDVSA-2011:165http://www.php.net/ChangeLog-5.php#5.3.7http://www.php.net/archive/2011.php#id2011-08-18-1http://www.redhat.com/support/errata/RHSA-2011-1423.htmlhttp://www.securityfocus.com/bid/49241https://exchange.xforce.ibmcloud.com/vulnerabilities/67606
2011-05-31
Published