National Cyber-Alert System

Vulnerability Summary for CVE-2007-4782

Overview

PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (09/12/2007)

We do not consider this to be a security issue. For more information please see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2008-3864

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html

External Source: UBUNTU

Name: USN-628-1

Hyperlink:http://www.ubuntu.com/usn/usn-628-1

External Source: BUGTRAQ

Name: 20070904 PHP < 5.2.3 fnmatch() denial of service

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/478630/100/0/threaded

External Source: BUGTRAQ

Name: 20070904 PHP < 5.2.3 glob() denial of service

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/478626/100/0/threaded

External Source: BUGTRAQ

Name: 20070905 PHP < 5.2.3 glob() denial of service

Hyperlink:http://www.securityfocus.com/archive/1/478726/100/0/threaded

External Source: REDHAT

Name: RHSA-2008:0582

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0582.html

External Source: REDHAT

Name: RHSA-2008:0545

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0545.html

External Source: REDHAT

Name: RHSA-2008:0544

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0544.html

External Source: REDHAT

Name: RHSA-2008:0505

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0505.html

External Source: MANDRIVA

Name: MDVSA-2009:023

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:023

External Source: MANDRIVA

Name: MDVSA-2009:022

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:022

External Source: SECUNIA

Name: 31200

Hyperlink:http://secunia.com/advisories/31200

External Source: SECUNIA

Name: 31119

Hyperlink:http://secunia.com/advisories/31119

External Source: SECUNIA

Name: 30828

Hyperlink:http://secunia.com/advisories/30828

External Source: OSVDB

Name: 38686

Hyperlink:http://osvdb.org/38686

External Source: XF

Name: php-globfunction-dos(36461)

Hyperlink:http://xforce.iss.net/xforce/xfdb/36461

External Source: XF

Name: php-fnmatch-dos(36457)

Hyperlink:http://xforce.iss.net/xforce/xfdb/36457

External Source: GENTOO

Name: GLSA-200710-02

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml

External Source: SREASON

Name: 3109

Hyperlink:http://securityreason.com/securityalert/3109

External Source: SECUNIA

Name: 28658

Hyperlink:http://secunia.com/advisories/28658

External Source: SECUNIA

Name: 27102

Hyperlink:http://secunia.com/advisories/27102

External Source: SUSE

Name: SUSE-SA:2008:004

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html