CVE-2007-0906
Fixed in a distro release EPSS 6%
Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions. NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885). NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825).
Products: php, trustix secure_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | php4 | 4:4.3.10-19 |
| Red Hat Enterprise Linux 2.1 | php | 0:4.1.2-2.14 |
| Red Hat Enterprise Linux 2.1 | php-devel | 0:4.1.2-2.14 |
| Red Hat Enterprise Linux 2.1 | php-imap | 0:4.1.2-2.14 |
| Red Hat Enterprise Linux 2.1 | php-ldap | 0:4.1.2-2.14 |
| Red Hat Enterprise Linux 2.1 | php-manual | 0:4.1.2-2.14 |
| Red Hat Enterprise Linux 2.1 | php-mysql | 0:4.1.2-2.14 |
| Red Hat Enterprise Linux 2.1 | php-odbc | 0:4.1.2-2.14 |
| Red Hat Enterprise Linux 2.1 | php-pgsql | 0:4.1.2-2.14 |
| Red Hat Enterprise Linux 3 | php | 0:4.3.2-39.ent |
| Red Hat Enterprise Linux 3 | php-debuginfo | 0:4.3.2-39.ent |
| Red Hat Enterprise Linux 3 | php-devel | 0:4.3.2-39.ent |
| Red Hat Enterprise Linux 3 | php-imap | 0:4.3.2-39.ent |
| Red Hat Enterprise Linux 3 | php-ldap | 0:4.3.2-39.ent |
| Red Hat Enterprise Linux 3 | php-mysql | 0:4.3.2-39.ent |
| Red Hat Enterprise Linux 3 | php-odbc | 0:4.3.2-39.ent |
| Red Hat Enterprise Linux 3 | php-pgsql | 0:4.3.2-39.ent |
| Red Hat Enterprise Linux 4 | php | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-debuginfo | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-devel | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-domxml | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-gd | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-imap | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-ldap | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-mbstring | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-mysql | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-ncurses | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-odbc | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-pear | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-pgsql | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-snmp | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 4 | php-xmlrpc | 0:4.3.9-3.22.3 |
| Red Hat Enterprise Linux 5 | php | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-bcmath | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-cli | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-common | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-dba | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-debuginfo | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-devel | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-gd | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-imap | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-ldap | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-mbstring | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-mysql | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-ncurses | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-odbc | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-pdo | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-pgsql | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-snmp | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-soap | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-xml | 0:5.1.6-7.el5 |
| Red Hat Enterprise Linux 5 | php-xmlrpc | 0:5.1.6-7.el5 |
| Red Hat rhel application stack 1 | php | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-bcmath | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-cli | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-common | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-dba | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-debuginfo | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-devel | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-gd | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-imap | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-ldap | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-mbstring | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-mysql | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-ncurses | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-odbc | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-pdo | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-pgsql | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-snmp | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-soap | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-xml | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel application stack 1 | php-xmlrpc | 0:5.1.6-3.el4s1.5 |
| Red Hat rhel stronghold 4.0 | stronghold-php | 0:4.1.2-12 |
| Red Hat rhel stronghold 4.0 | stronghold-php-devel | 0:4.1.2-12 |
| Red Hat rhel stronghold 4.0 | stronghold-php-imap | 0:4.1.2-12 |
| Red Hat rhel stronghold 4.0 | stronghold-php-ldap | 0:4.1.2-12 |
| Red Hat rhel stronghold 4.0 | stronghold-php-manual | 0:4.1.2-12 |
| Red Hat rhel stronghold 4.0 | stronghold-php-mysql | 0:4.1.2-12 |
| Red Hat rhel stronghold 4.0 | stronghold-php-odbc | 0:4.1.2-12 |
| Red Hat rhel stronghold 4.0 | stronghold-php-pgsql | 0:4.1.2-12 |
| Red Hat rhel stronghold 4.0 | stronghold-php-snmp | 0:4.1.2-12 |