QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-1700

Back to search

CVE-2007-1700

Published: Mar 27, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbitrary code via a crafted string in the session_register after unsetting HTTP_SESSION_VARS and _SESSION, which destroys the session data Hashtable.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2007-1991
vdb-entry
x_refsource_VUPEN
25056
third-party-advisory
x_refsource_SECUNIA
DSA-1283
vendor-advisory
x_refsource_DEBIAN
SSRT071423
vendor-advisory
x_refsource_HP
GLSA-200705-19
vendor-advisory
x_refsource_GENTOO
23119
vdb-entry
x_refsource_BID
HPSBTU02232
vendor-advisory
x_refsource_HP
SSRT071429
vendor-advisory
x_refsource_HP
25062
third-party-advisory
x_refsource_SECUNIA
ADV-2007-2374
vdb-entry
x_refsource_VUPEN
25423
third-party-advisory
x_refsource_SECUNIA
USN-455-1
vendor-advisory
x_refsource_UBUNTU
HPSBMA02215
vendor-advisory
x_refsource_HP
25850
third-party-advisory
x_refsource_SECUNIA
25445
third-party-advisory
x_refsource_SECUNIA
25057
third-party-advisory
x_refsource_SECUNIA
SUSE-SA:2007:032
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now